]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Input: ipaq-micro-keys - add length check in micro_key_receive
authorDmitry Torokhov <dmitry.torokhov@gmail.com>
Wed, 10 Jun 2026 23:02:42 +0000 (16:02 -0700)
committerDmitry Torokhov <dmitry.torokhov@gmail.com>
Thu, 11 Jun 2026 20:52:18 +0000 (13:52 -0700)
commitff25a3b1cd607b268b7b3e47f068460ea1eeb956
tree39719d7c0be426e734bd5b0093fe864f28e28509
parented0428e92812b5d4e9d5c4cbcab9a4f107137dfc
Input: ipaq-micro-keys - add length check in micro_key_receive

The driver accesses the message payload (msg[0]) without checking if
the length is greater than zero. The parent MFD driver can produce a
payload with a length of 0, in which case msg[0] would be uninitialized
or stale.

Add a check to return early if len is less than 1.

Reported-by: sashiko-bot@kernel.org
Assisted-by: Antigravity:gemini-3.5-flash
Link: https://patch.msgid.link/aintAvTyw4CVb5hG@google.com
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
drivers/input/keyboard/ipaq-micro-keys.c