kernel/linux.git/drivers/input/tablet, branch v4.9.196

Input: kbtab - sanity check for endpoint type

2019-08-25T08:51:44+00:00

commit c88090dfc84254fa149174eb3e6a8458de1912c4 upstream. The driver should check whether the endpoint it uses has the correct type. Reported-by: syzbot+c7df50363aaff50aa363@syzkaller.appspotmail.com Signed-off-by: Oliver Neukum Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: gtco - bounds check collection indent level

2019-08-04T07:33:26+00:00

commit 2a017fd82c5402b3c8df5e3d6e5165d9e6147dc1 upstream. The GTCO tablet input driver configures itself from an HID report sent via USB during the initial enumeration process. Some debugging messages are generated during the parsing. A debugging message indentation counter is not bounds checked, leading to the ability for a specially crafted HID report to cause '-' and null bytes be written past the end of the indentation array. As long as the kernel has CONFIG_DYNAMIC_DEBUG enabled, this code will not be optimized out. This was discovered during code review after a previous syzkaller bug was found in this driver. Signed-off-by: Grant Hernandez Cc: stable@vger.kernel.org Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: wacom_serial4 - add support for Wacom ArtPad II tablet

2019-03-13T21:05:01+00:00

commit 44fc95e218a09d7966a9d448941fdb003f6bb69f upstream. Tablet initially begins communicating at 9600 baud, so this command should be used to connect to the device: $ inputattach --daemon --baud 9600 --wacom_iv /dev/ttyS0 https://github.com/linuxwacom/xf86-input-wacom/issues/40 Signed-off-by: Jason Gerecke Cc: stable@vger.kernel.org Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: gtco - fix potential out-of-bound access

2017-11-02T08:49:14+00:00

commit a50829479f58416a013a4ccca791336af3c584c7 upstream. parse_hid_report_descriptor() has a while (i < length) loop, which only guarantees that there's at least 1 byte in the buffer, but the loop body can read multiple bytes which causes out-of-bounds access. Reported-by: Andrey Konovalov Reviewed-by: Andrey Konovalov Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: kbtab - validate number of endpoints before using them

2017-03-30T07:41:23+00:00

commit cb1b494663e037253337623bf1ef2df727883cb7 upstream. Make sure to check the number of endpoints to avoid dereferencing a NULL-pointer should a malicious device lack endpoints. Signed-off-by: Johan Hovold Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: hanwang - validate number of endpoints before using them

2017-03-30T07:41:23+00:00

commit ba340d7b83703768ce566f53f857543359aa1b98 upstream. Make sure to check the number of endpoints to avoid dereferencing a NULL-pointer should a malicious device lack endpoints. Fixes: bba5394ad3bd ("Input: add support for Hanwang tablets") Signed-off-by: Johan Hovold Signed-off-by: Dmitry Torokhov Signed-off-by: Greg Kroah-Hartman

Input: pegasus_notetaker - directly include workqueue header

2016-08-25T17:11:32+00:00

According to the kernel's guidelines, let's directly include the workqueue functions we use. Signed-off-by: Martin Kepplinger Signed-off-by: Dmitry Torokhov

Input: pegasus_notetaker - set device mode in reset_resume() if in use

2016-07-19T21:33:07+00:00

Signed-off-by: Martin Kepplinger Signed-off-by: Dmitry Torokhov

Input: pegasus_notetaker - cancel workqueue's work in suspend()

2016-07-19T21:33:06+00:00

Signed-off-by: Martin Kepplinger Signed-off-by: Dmitry Torokhov

Input: pegasus_notetaker - fix usb_autopm calls to be balanced

2016-07-19T21:33:05+00:00

We should only "put" the interface if submitting URB or setting tablet mode in pegasus_open() fails, otherwise leave it to pegasus_close(). Signed-off-by: Martin Kepplinger Signed-off-by: Dmitry Torokhov