WSL2-Linux-Kernel/drivers/hid
Jason Gerecke 20f3cf5f86 HID: wacom: Avoid using stale array indicies to read contact count
If we ever see a touch report with contact count data we initialize
several variables used to read the contact count in the pre-report
phase. These variables are never reset if we process a report which
doesn't contain a contact count, however. This can cause the pre-
report function to trigger a read of arbitrary memory (e.g. NULL
if we're lucky) and potentially crash the driver.

This commit restores resetting of the variables back to default
"none" values that were used prior to the commit mentioned
below.

Link: https://github.com/linuxwacom/input-wacom/issues/276
Fixes: 003f50ab67 (HID: wacom: Update last_slot_field during pre_report phase)
CC: stable@vger.kernel.org
Signed-off-by: Jason Gerecke <jason.gerecke@wacom.com>
Reviewed-by: Ping Cheng <ping.cheng@wacom.com>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
2022-01-21 15:10:02 +01:00
..
amd-sfh-hid Merge branch 'for-5.16/amd-sfh' into for-linus 2021-11-05 12:08:34 +01:00
i2c-hid Merge branch 'for-5.17/i2c-hid' into for-linus 2022-01-10 09:56:27 +01:00
intel-ish-hid HID: intel-ish-hid: ishtp-fw-loader: Fix a kernel-doc formatting issue 2022-01-06 15:39:43 +01:00
surface-hid HID: add suspend/resume helpers 2021-12-02 15:42:46 +01:00
usbhid HID: add suspend/resume helpers 2021-12-02 15:42:46 +01:00
Kconfig HID: Add new Letsketch tablet driver 2022-01-06 14:22:51 +01:00
Makefile HID: Add new Letsketch tablet driver 2022-01-06 14:22:51 +01:00
hid-a4tech.c HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95 2021-05-05 14:29:13 +02:00
hid-accutouch.c
hid-alps.c Merge branch 'for-5.13/warnings' into for-linus 2021-04-29 21:47:22 +02:00
hid-apple.c HID: apple: Add Magic Keyboard 2021 with fingerprint reader FN key mapping 2022-01-06 14:01:32 +01:00
hid-appleir.c
hid-asus.c HID: add hid_is_usb() function to make it simpler for USB detection 2021-12-02 15:35:57 +01:00
hid-aureal.c
hid-axff.c
hid-belkin.c
hid-betopff.c HID: betop: fix slab-out-of-bounds Write in betop_probe 2021-09-15 16:31:21 +02:00
hid-bigbenff.c HID: bigbenff: prevent null pointer dereference 2021-12-02 15:36:18 +01:00
hid-cherry.c
hid-chicony.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-cmedia.c HID: cmedia: add support for HS-100B mute button 2021-07-28 11:51:07 +02:00
hid-core.c HID: do not inline some hid_hw_ functions 2021-12-02 15:42:46 +01:00
hid-corsair.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-cougar.c HID: cougar: Make use of the helper function devm_add_action_or_reset() 2021-10-07 13:37:25 +02:00
hid-cp2112.c HID: cp2112: Use struct_group() for memcpy() region 2021-09-25 08:20:48 -07:00
hid-creative-sb0540.c
hid-cypress.c HID: cypress: Support Varmilo Keyboards' media hotkeys 2020-10-23 13:23:44 +02:00
hid-debug.c HID: debug: Add USI usages 2021-12-14 10:08:45 +01:00
hid-dr.c
hid-elan.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-elecom.c HID: elecom: drop stray comment 2020-11-25 17:40:23 +01:00
hid-elo.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-emsff.c
hid-ezkey.c
hid-ft260.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-gaff.c
hid-gembird.c
hid-generic.c
hid-gfrm.c
hid-glorious.c
hid-google-hammer.c HID: google: add eel USB id 2021-12-03 09:19:38 +01:00
hid-gt683r.c HID: gt683r: add missing MODULE_DEVICE_TABLE 2021-05-27 15:40:34 +02:00
hid-gyration.c
hid-holtek-kbd.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-holtek-mouse.c HID: holtek: fix mouse probing 2021-12-20 11:25:42 +01:00
hid-holtekff.c
hid-hyperv.c HID: hyperv: Use VMBUS_RING_SIZE() for ringbuffer sizes 2020-09-28 08:57:28 +00:00
hid-icade.c
hid-ids.h HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100 2022-01-12 11:13:10 +01:00
hid-input.c HID: Ignore battery for Elan touchscreen on HP Envy X360 15t-dr100 2022-01-12 11:13:10 +01:00
hid-ite.c HID: lg-g15 + ite: Add MODULE_AUTHOR 2021-05-05 14:39:24 +02:00
hid-jabra.c
hid-kensington.c
hid-keytouch.c
hid-kye.c HID: hid-kye: Fix incorrect function name for kye_tablet_enable() 2021-04-07 18:46:20 +02:00
hid-lcpower.c
hid-led.c
hid-lenovo.c HID: lenovo: Add support for Thinkpad X1 Tablet Thin keyboard 2021-04-07 12:48:20 +02:00
hid-letsketch.c HID: Add new Letsketch tablet driver 2022-01-06 14:22:51 +01:00
hid-lg-g15.c HID: lg-g15 + ite: Add MODULE_AUTHOR 2021-05-05 14:39:24 +02:00
hid-lg.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-lg.h
hid-lg2ff.c
hid-lg3ff.c
hid-lg4ff.c
hid-lg4ff.h
hid-lgff.c
hid-logitech-dj.c HID: add hid_is_usb() function to make it simpler for USB detection 2021-12-02 15:35:57 +01:00
hid-logitech-hidpp.c HID: logitech-hidpp: battery: provide CAPACITY property for newer devices 2021-08-20 14:32:39 +02:00
hid-macally.c HID: macally: Constify macally_id_table 2020-08-17 11:38:49 +02:00
hid-magicmouse.c Merge branch 'for-5.17/magicmouse' into for-linus 2022-01-10 09:58:34 +01:00
hid-maltron.c
hid-mcp2221.c HID: mcp2221: Fix GPIO output handling 2020-11-05 11:16:53 +01:00
hid-mf.c HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter 2020-11-25 14:30:33 +01:00
hid-microsoft.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid 2020-09-02 12:55:46 -07:00
hid-monterey.c
hid-multitouch.c HID: hid-input: Add suffix also for HID_DG_PEN 2021-12-14 10:08:40 +01:00
hid-nintendo.c HID: nintendo: eliminate dead datastructures in !CONFIG_NINTENDO_FF case 2021-11-19 15:58:30 +01:00
hid-nti.c
hid-ntrig.c
hid-ortek.c
hid-penmount.c
hid-petalynx.c
hid-picolcd.h
hid-picolcd_backlight.c
hid-picolcd_cir.c media: rc: harmonize infrared durations to microseconds 2020-09-03 16:18:55 +02:00
hid-picolcd_core.c HID: hid-picolcd_core: Remove unused variable 'ret' 2021-04-07 18:46:20 +02:00
hid-picolcd_debugfs.c
hid-picolcd_fb.c
hid-picolcd_lcd.c
hid-picolcd_leds.c
hid-pl.c
hid-plantronics.c HID: plantronics: Workaround for double volume key presses 2021-03-08 11:08:58 +01:00
hid-playstation.c HID: playstation: fix return from dualsense_player_led_set_brightness() 2021-10-27 10:05:07 +02:00
hid-primax.c
hid-prodikeys.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-quirks.c Merge branch 'for-5.17/apple' into for-linus 2022-01-10 09:54:31 +01:00
hid-redragon.c
hid-retrode.c
hid-rmi.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input 2020-10-23 16:16:31 -07:00
hid-roccat-arvo.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-arvo.h
hid-roccat-common.c
hid-roccat-common.h
hid-roccat-isku.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-isku.h
hid-roccat-kone.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-kone.h HID: roccat: Use struct_group() to zero kone_mouse_event 2021-09-25 08:20:48 -07:00
hid-roccat-koneplus.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-koneplus.h
hid-roccat-konepure.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-kovaplus.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-kovaplus.h
hid-roccat-lua.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-lua.h
hid-roccat-pyra.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-pyra.h
hid-roccat-ryos.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-savu.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-roccat-savu.h
hid-roccat.c
hid-saitek.c
hid-samsung.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-semitek.c HID: semitek: new driver for GK6X series keyboards 2021-05-05 14:21:08 +02:00
hid-sensor-custom.c HID: hid-sensor-custom: Process failure of sensor_hub_set_feature() 2021-05-26 12:36:46 +02:00
hid-sensor-hub.c HID: hid-sensor-hub: Return error for hid_set_field() failure 2021-05-05 14:36:18 +02:00
hid-sjoy.c
hid-sony.c HID: sony: fix error path in probe 2021-12-02 15:36:18 +01:00
hid-speedlink.c
hid-steam.c
hid-steelseries.c
hid-sunplus.c
hid-thrustmaster.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-tivo.c
hid-tmff.c HID: thrustmaster use swap() to make code cleaner 2021-12-14 10:50:23 +01:00
hid-topseed.c
hid-twinhan.c
hid-u2fzero.c HID: add hid_is_usb() function to make it simpler for USB detection 2021-12-02 15:35:57 +01:00
hid-uclogic-core.c HID: check for valid USB device for many HID drivers 2021-12-02 15:36:18 +01:00
hid-uclogic-params.c HID: hid-uclogic-params: Invalid parameter check in uclogic_params_frame_init_v1_buttonpad 2022-01-06 15:39:43 +01:00
hid-uclogic-params.h
hid-uclogic-rdesc.c HID: hid-uclogic-rdesc: Kernel-doc is for functions and structs 2021-04-07 18:46:20 +02:00
hid-uclogic-rdesc.h
hid-udraw-ps3.c HID: udraw-ps3: Replace HTTP links with HTTPS ones 2020-07-20 12:24:41 +02:00
hid-viewsonic.c
hid-vivaldi.c HID: vivaldi: Minor cleanups 2022-01-14 11:52:13 +01:00
hid-waltop.c
hid-wiimote-core.c HID: wiimote: remove h from printk format specifier 2021-01-07 10:14:58 +01:00
hid-wiimote-debug.c
hid-wiimote-modules.c
hid-wiimote.h
hid-xiaomi.c HID: Add support for side buttons of Xiaomi Mi Dual Mode Wireless Mouse Silent 2021-09-22 11:53:07 +02:00
hid-xinmo.c
hid-zpff.c
hid-zydacron.c
hidraw.c HID: hidraw: Replace hidraw device table mutex with a rwsem 2021-12-14 10:52:18 +01:00
uhid.c HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running 2022-01-19 15:59:05 +01:00
wacom.h
wacom_sys.c HID: wacom: fix problems when device is not a valid USB device 2021-12-02 15:36:12 +01:00
wacom_wac.c HID: wacom: Avoid using stale array indicies to read contact count 2022-01-21 15:10:02 +01:00
wacom_wac.h HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts 2021-11-10 10:02:06 +01:00