Vladis Dronov 13054abbaa HID: debug: fix the ring buffer implementation ... Ring buffer implementation in hid_debug_event() and hid_debug_events_read() is strange allowing lost or corrupted data. After commit 717adfdaf1 ("HID: debug: check length before copy_to_user()") it is possible to enter an infinite loop in hid_debug_events_read() by providing 0 as count, this locks up a system. Fix this by rewriting the ring buffer implementation with kfifo and simplify the code. This fixes CVE-2019-3819. v2: fix an execution logic and add a comment v3: use __set_current_state() instead of set_current_state() Link: https://bugzilla.redhat.com/show_bug.cgi?id=1669187 Cc: stable@vger.kernel.org # v4.18+ Fixes: cd667ce247 ("HID: use debugfs for events/reports dumping") Fixes: 717adfdaf1 ("HID: debug: check length before copy_to_user()") Signed-off-by: Vladis Dronov <vdronov@redhat.com> Reviewed-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>		2019-01-29 12:09:11 +01:00
..
i2c-hid	HID: i2c-hid: Disable runtime PM on Goodix touchpad	2019-01-14 12:17:51 +01:00
intel-ish-hid	Merge branches 'for-4.20/upstream-fixes', 'for-4.21/core', 'for-4.21/hid-asus', 'for-4.21/hid-core', 'for-4.21/hid-cougar', 'for-4.21/hidraw', 'for-4.21/highres-wheel' and 'for-4.21/ish' into for-linus	2019-01-03 12:50:28 +01:00
usbhid	…
Kconfig	platform-drivers-x86 for v4.20-1	2018-11-01 08:42:21 -07:00
Makefile	…
hid-a4tech.c	…
hid-accutouch.c	…
hid-alps.c	…
hid-apple.c	…
hid-appleir.c	…
hid-asus.c	HID: asus: Add support for the ASUS T101HA keyboard dock	2018-12-17 11:10:39 +01:00
hid-aureal.c	…
hid-axff.c	…
hid-belkin.c	…
hid-betopff.c	…
hid-bigbenff.c	…
hid-cherry.c	…
hid-chicony.c	…
hid-cmedia.c	…
hid-core.c	HID: core: simplify active collection tracking	2019-01-16 14:29:48 +01:00
hid-corsair.c	…
hid-cougar.c	HID: cougar: Add support for Cougar 700K Gaming Keyboard	2018-11-21 14:41:43 +01:00
hid-cp2112.c	gpio: Pass a flag to gpiochip_request_own_desc()	2018-12-14 14:24:33 +01:00
hid-cypress.c	…
hid-debug.c	HID: debug: fix the ring buffer implementation	2019-01-29 12:09:11 +01:00
hid-dr.c	…
hid-elan.c	…
hid-elecom.c	…
hid-elo.c	…
hid-emsff.c	…
hid-ezkey.c	…
hid-gaff.c	…
hid-gembird.c	…
hid-generic.c	…
hid-gfrm.c	…
hid-google-hammer.c	…
hid-gt683r.c	…
hid-gyration.c	…
hid-holtek-kbd.c	…
hid-holtek-mouse.c	…
hid-holtekff.c	…
hid-hyperv.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2018-12-04 08:47:04 -08:00
hid-icade.c	…
hid-ids.h	HID: i2c-hid: Disable runtime PM on Goodix touchpad	2019-01-14 12:17:51 +01:00
hid-input.c	HID: input: use the Resolution Multiplier for high-resolution scrolling	2018-12-07 16:27:13 +01:00
hid-ite.c	HID: ite: Add USB id match for another ITE based keyboard rfkill key quirk	2018-11-30 14:12:07 +01:00
hid-jabra.c	…
hid-kensington.c	…
hid-keytouch.c	…
hid-kye.c	…
hid-lcpower.c	…
hid-led.c	…
hid-lenovo.c	HID: lenovo: Add checks to fix of_led_classdev_register	2019-01-03 11:30:08 +01:00
hid-lg.c	…
hid-lg.h	…
hid-lg2ff.c	…
hid-lg3ff.c	…
hid-lg4ff.c	…
hid-lg4ff.h	…
hid-lgff.c	…
hid-logitech-dj.c	…
hid-logitech-hidpp.c	HID: logitech: Use LDJ_DEVICE macro for existing Logitech mice	2018-12-07 16:27:16 +01:00
hid-magicmouse.c	…
hid-mf.c	…
hid-microsoft.c	…
hid-monterey.c	…
hid-multitouch.c	HID: multitouch: Add pointstick support for Cirque Touchpad	2018-11-19 16:26:59 +01:00
hid-nti.c	…
hid-ntrig.c	…
hid-ortek.c	…
hid-penmount.c	…
hid-petalynx.c	…
hid-picolcd.h	…
hid-picolcd_backlight.c	…
hid-picolcd_cir.c	…
hid-picolcd_core.c	…
hid-picolcd_debugfs.c	…
hid-picolcd_fb.c	…
hid-picolcd_lcd.c	…
hid-picolcd_leds.c	…
hid-pl.c	…
hid-plantronics.c	…
hid-primax.c	…
hid-prodikeys.c	…
hid-quirks.c	HID: quirks: fix RetroUSB.com devices	2018-12-07 14:12:34 +01:00
hid-redragon.c	…
hid-retrode.c	…
hid-rmi.c	…
hid-roccat-arvo.c	…
hid-roccat-arvo.h	…
hid-roccat-common.c	…
hid-roccat-common.h	…
hid-roccat-isku.c	…
hid-roccat-isku.h	…
hid-roccat-kone.c	…
hid-roccat-kone.h	…
hid-roccat-koneplus.c	…
hid-roccat-koneplus.h	…
hid-roccat-konepure.c	…
hid-roccat-kovaplus.c	…
hid-roccat-kovaplus.h	…
hid-roccat-lua.c	…
hid-roccat-lua.h	…
hid-roccat-pyra.c	…
hid-roccat-pyra.h	…
hid-roccat-ryos.c	…
hid-roccat-savu.c	…
hid-roccat-savu.h	…
hid-roccat.c	…
hid-saitek.c	…
hid-samsung.c	…
hid-sensor-custom.c	iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers	2018-11-16 11:42:12 +00:00
hid-sensor-hub.c	iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers	2018-11-16 11:42:12 +00:00
hid-sjoy.c	…
hid-sony.c	…
hid-speedlink.c	…
hid-steam.c	HID: steam: remove input device when a hid client is running.	2018-11-19 16:19:51 +01:00
hid-steelseries.c	…
hid-sunplus.c	…
hid-tivo.c	…
hid-tmff.c	…
hid-topseed.c	…
hid-twinhan.c	…
hid-uclogic.c	…
hid-udraw-ps3.c	…
hid-waltop.c	…
hid-wiimote-core.c	…
hid-wiimote-debug.c	…
hid-wiimote-modules.c	…
hid-wiimote.h	…
hid-xinmo.c	…
hid-zpff.c	…
hid-zydacron.c	…
hidraw.c	HID: hidraw: enforce minors_lock locking via lockdep	2018-11-12 12:44:03 +01:00
uhid.c	Revert "HID: uhid: use strlcpy() instead of strncpy()"	2018-11-19 14:32:27 +01:00
wacom.h	…
wacom_sys.c	…
wacom_wac.c	…
wacom_wac.h	…