Dan Carpenter d63706d9f7 Input: ims-pcu - check record size in ims_pcu_flash_firmware() ... commit a95ef0199e upstream. The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "len" is too large it could result in memory corruption when we do "memcpy(fragment->data, rec->data, len);" Fixes: 628329d524 ("Input: add IMS Passenger Control Unit driver") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Link: https://lore.kernel.org/r/131fd1ae92c828ee9f4fa2de03d8c210ae1f3524.1748463049.git.dan.carpenter@linaro.org Cc: stable@vger.kernel.org Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-06-27 11:04:13 +01:00
..
gameport
joystick	Input: xpad - add support for wooting two he (arm)	2025-02-01 18:22:34 +01:00
keyboard	Input: atkbd - map F23 key to support default copilot shortcut	2025-02-01 18:22:33 +01:00
misc	Input: ims-pcu - check record size in ims_pcu_flash_firmware()	2025-06-27 11:04:13 +01:00
mouse	Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5	2025-06-04 14:36:54 +02:00
rmi4	Input: synaptics-rmi - fix crash with unsupported versions of F34	2025-06-27 11:04:08 +01:00
serio	Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line	2024-10-17 15:08:00 +02:00
tablet	Input: aiptek - properly check endpoint type	2022-03-23 09:13:29 +01:00
touchscreen	Input: goodix - use the new soc_intel_is_byt() helper	2024-10-17 15:07:58 +02:00
apm-power.c
evbug.c
evdev.c
ff-core.c	Input: ff-core - prefer struct_size over open coded arithmetic	2024-07-18 13:05:39 +02:00
ff-memless.c
input-compat.c
input-compat.h
input-leds.c
input-mt.c	Input: MT - limit max slots	2024-09-04 13:17:43 +02:00
input-polldev.c
input-poller.c
input-poller.h
input.c	Input: try trimming too long modalias strings	2024-07-05 09:12:26 +02:00
joydev.c
Kconfig
Makefile
matrix-keymap.c
mousedev.c
sparse-keymap.c