]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
authorLee Jones <lee.jones@linaro.org>
Fri, 8 Jul 2022 07:40:09 +0000 (08:40 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 5 Sep 2022 08:26:33 +0000 (10:26 +0200)
commitc20d03b82a2e3ddbb555dad4d4f3374a9763222c
treed3935509e12e9bdece4764a5f095ca9c77aec0df
parent61d968f0e9059f41686d75ded57bdb573e4f0dff
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

commit cd11d1a6114bd4bc6450ae59f6e110ec47362126 upstream.

It is possible for a malicious device to forgo submitting a Feature
Report.  The HID Steam driver presently makes no prevision for this
and de-references the 'struct hid_report' pointer obtained from the
HID devices without first checking its validity.  Let's change that.

Cc: Jiri Kosina <jikos@kernel.org>
Cc: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Cc: linux-input@vger.kernel.org
Fixes: c164d6abf3841 ("HID: add driver for Valve Steam Controller")
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/hid/hid-steam.c