<feed xmlns='http://www.w3.org/2005/Atom'>
<title>kernel/linux.git/drivers/input/tablet, branch v3.2.95</title>
<subtitle>Linux kernel stable tree (mirror)</subtitle>
<id>https://git.radix-linux.su/kernel/linux.git/atom?h=v3.2.95</id>
<link rel='self' href='https://git.radix-linux.su/kernel/linux.git/atom?h=v3.2.95'/>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/'/>
<updated>2017-07-18T17:38:34+00:00</updated>
<entry>
<title>Input: kbtab - validate number of endpoints before using them</title>
<updated>2017-07-18T17:38:34+00:00</updated>
<author>
<name>Johan Hovold</name>
<email>johan@kernel.org</email>
</author>
<published>2017-03-16T18:41:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=3ae9936940b17d47899ea78188c68442dcc92395'/>
<id>urn:sha1:3ae9936940b17d47899ea78188c68442dcc92395</id>
<content type='text'>
commit cb1b494663e037253337623bf1ef2df727883cb7 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Signed-off-by: Johan Hovold &lt;johan@kernel.org&gt;
Signed-off-by: Dmitry Torokhov &lt;dmitry.torokhov@gmail.com&gt;
Signed-off-by: Ben Hutchings &lt;ben@decadent.org.uk&gt;
</content>
</entry>
<entry>
<title>Input: hanwang - validate number of endpoints before using them</title>
<updated>2017-07-18T17:38:34+00:00</updated>
<author>
<name>Johan Hovold</name>
<email>johan@kernel.org</email>
</author>
<published>2017-03-16T18:39:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=5a2a5e6c28b145bc90652899c0b9f34404caee75'/>
<id>urn:sha1:5a2a5e6c28b145bc90652899c0b9f34404caee75</id>
<content type='text'>
commit ba340d7b83703768ce566f53f857543359aa1b98 upstream.

Make sure to check the number of endpoints to avoid dereferencing a
NULL-pointer should a malicious device lack endpoints.

Fixes: bba5394ad3bd ("Input: add support for Hanwang tablets")
Signed-off-by: Johan Hovold &lt;johan@kernel.org&gt;
Signed-off-by: Dmitry Torokhov &lt;dmitry.torokhov@gmail.com&gt;
Signed-off-by: Ben Hutchings &lt;ben@decadent.org.uk&gt;
</content>
</entry>
<entry>
<title>Input: gtco - fix crash on detecting device without endpoints</title>
<updated>2016-06-15T20:28:10+00:00</updated>
<author>
<name>Vladis Dronov</name>
<email>vdronov@redhat.com</email>
</author>
<published>2016-03-31T17:53:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=315085d5f39f1be90960b9ee4749c2e5df21096e'/>
<id>urn:sha1:315085d5f39f1be90960b9ee4749c2e5df21096e</id>
<content type='text'>
commit 162f98dea487206d9ab79fc12ed64700667a894d upstream.

The gtco driver expects at least one valid endpoint. If given malicious
descriptors that specify 0 for the number of endpoints, it will crash in
the probe function. Ensure there is at least one endpoint on the interface
before using it.

Also let's fix a minor coding style issue.

The full correct report of this issue can be found in the public
Red Hat Bugzilla:

https://bugzilla.redhat.com/show_bug.cgi?id=1283385

Reported-by: Ralf Spenneberg &lt;ralf@spenneberg.net&gt;
Signed-off-by: Vladis Dronov &lt;vdronov@redhat.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dmitry.torokhov@gmail.com&gt;
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings &lt;ben@decadent.org.uk&gt;
</content>
</entry>
<entry>
<title>Input: aiptek - fix crash on detecting device without endpoints</title>
<updated>2016-04-01T00:54:37+00:00</updated>
<author>
<name>Vladis Dronov</name>
<email>vdronov@redhat.com</email>
</author>
<published>2015-12-01T21:09:17+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=90eb3c037fe3f0f25f01713a92725a8daa2b41f3'/>
<id>urn:sha1:90eb3c037fe3f0f25f01713a92725a8daa2b41f3</id>
<content type='text'>
commit 8e20cf2bce122ce9262d6034ee5d5b76fbb92f96 upstream.

The aiptek driver crashes in aiptek_probe() when a specially crafted USB
device without endpoints is detected. This fix adds a check that the device
has proper configuration expected by the driver. Also an error return value
is changed to more matching one in one of the error paths.

Reported-by: Ralf Spenneberg &lt;ralf@spenneberg.net&gt;
Signed-off-by: Vladis Dronov &lt;vdronov@redhat.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dmitry.torokhov@gmail.com&gt;
[bwh: Backported to 3.2: adjust context]
Signed-off-by: Ben Hutchings &lt;ben@decadent.org.uk&gt;
</content>
</entry>
<entry>
<title>Input: wacom - relax Bamboo stylus ID check</title>
<updated>2012-05-30T23:43:48+00:00</updated>
<author>
<name>Chris Bagwell</name>
<email>chris@cnpbagwell.com</email>
</author>
<published>2011-10-27T05:28:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=3bd15e770d6b33b53306cb6279234da2383ba3c9'/>
<id>urn:sha1:3bd15e770d6b33b53306cb6279234da2383ba3c9</id>
<content type='text'>
commit c5981411f60c31f0dff6f0f98d2d3711384badaf upstream.

Bit 0x02 always means tip versus eraser. Bit 0x01 is something related
to version of stylus and different values are starting to be used.

Relaxing proximity check is required to be used with 3rd generation
Bamboo Pen and Touch tablets.

Signed-off-by: Chris Bagwell &lt;chris@cnpbagwell.com&gt;
Acked-by: Ping Cheng &lt;pingc@wacom.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dtor@mail.ru&gt;
Signed-off-by: Ben Hutchings &lt;ben@decadent.org.uk&gt;
</content>
</entry>
<entry>
<title>Input: wacom - add product id used by Samsung Slate 7</title>
<updated>2011-12-12T08:00:55+00:00</updated>
<author>
<name>Chris Bagwell</name>
<email>chris@cnpbagwell.com</email>
</author>
<published>2011-12-12T07:50:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=0d0e3064a88cc8d6bd3a9b43c5ae069ca838fc6e'/>
<id>urn:sha1:0d0e3064a88cc8d6bd3a9b43c5ae069ca838fc6e</id>
<content type='text'>
New product ID reported by Harvey Braun on linuxwacom mailing list
and also tested this patch with new hardware.

Signed-off-by: Chris Bagwell &lt;chris@cnpbagwell.com&gt;
Acked-by: Ping Cheng &lt;pinglinux@gmail.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dtor@mail.ru&gt;
</content>
</entry>
<entry>
<title>Merge branch 'next' into for-linus</title>
<updated>2011-10-27T04:46:20+00:00</updated>
<author>
<name>Dmitry Torokhov</name>
<email>dmitry.torokhov@gmail.com</email>
</author>
<published>2011-10-27T04:46:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=6ad390a25a9d1d8606b9b826878f0a30639dc2b3'/>
<id>urn:sha1:6ad390a25a9d1d8606b9b826878f0a30639dc2b3</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Input: wacom - correct max Y value on medium bamboos</title>
<updated>2011-10-10T15:55:37+00:00</updated>
<author>
<name>Chris Bagwell</name>
<email>chris@cnpbagwell.com</email>
</author>
<published>2011-10-10T15:52:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=ae927560a7d3055618ccc73a5d057cdd91b63740'/>
<id>urn:sha1:ae927560a7d3055618ccc73a5d057cdd91b63740</id>
<content type='text'>
Medium size Bamboo P&amp;T driver reused max X/Y form older Bamboo 1
medium size tablets and never updated to real value. Actual
active area of tablet is slightly larger in Y direction.

Signed-off-by: Chris Bagwell &lt;chris@cnpbagwell.com&gt;
Acked-by: Ping Cheng &lt;pingc@wacom.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dtor@mail.ru&gt;
</content>
</entry>
<entry>
<title>Input: wacom - add ABS_DISTANCE to Bamboo Pen reports</title>
<updated>2011-10-10T15:55:34+00:00</updated>
<author>
<name>Chris Bagwell</name>
<email>chris@cnpbagwell.com</email>
</author>
<published>2011-10-10T15:52:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=c18c2cec31881130c591ea60590859002945cd96'/>
<id>urn:sha1:c18c2cec31881130c591ea60590859002945cd96</id>
<content type='text'>
Tablet reports a distance of 0 right at highest point possible
to be in proximity and distance_max when touching tablet. Inverse
the distance since user land has no way of knowing ABS_DISTANCE
is not distance from tablet.

Signed-off-by: Chris Bagwell &lt;chris@cnpbagwell.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dtor@mail.ru&gt;
</content>
</entry>
<entry>
<title>Input: wacom - remove unneeded touch pressure initialization</title>
<updated>2011-10-10T15:55:30+00:00</updated>
<author>
<name>Chris Bagwell</name>
<email>chris@cnpbagwell.com</email>
</author>
<published>2011-10-10T15:51:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/kernel/linux.git/commit/?id=3d11ae8190c1b273d655b4d8d82be36754587910'/>
<id>urn:sha1:3d11ae8190c1b273d655b4d8d82be36754587910</id>
<content type='text'>
These were left in during removal of touch pressure reports but not
needed now.

Signed-off-by: Chris Bagwell &lt;chris@cnpbagwell.com&gt;
Reviewed-by: Ping Cheng &lt;pingc@wacom.com&gt;
Signed-off-by: Dmitry Torokhov &lt;dtor@mail.ru&gt;
</content>
</entry>
</feed>
