From: Kees Cook <keescook@chromium.org>
Date: Wed, 28 Aug 2013 20:31:44 +0000 (+0200)
Subject: HID: sensor-hub: validate feature report details
X-Git-Tag: v3.12-rc1~125^2~1^7~5
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9e8910257397372633e74b333ef891f20c800ee4;p=pandora-kernel.git

HID: sensor-hub: validate feature report details

A HID device could send a malicious feature report that would cause the
sensor-hub HID driver to read past the end of heap allocation, leaking
kernel memory contents to the caller.

CVE-2013-2898

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@kernel.org
Reviewed-by: Mika Westerberg <mika.westerberg@linux.intel.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
---

Reading git-diff-tree failed