Input: gtco - fix potential out-of-bound access
parse_hid_report_descriptor() has a while (i < length) loop, which
only guarantees that there's at least 1 byte in the buffer, but the
loop body can read multiple bytes which causes out-of-bounds access.
Reported-by: Andrey Konovalov <email@example.com>
Reviewed-by: Andrey Konovalov <firstname.lastname@example.org>
Signed-off-by: Dmitry Torokhov <email@example.com>
1 file changed