)]}' { "commit": "a50829479f58416a013a4ccca791336af3c584c7", "tree": "74da0be0913dcd747df260a8432f2d8d8c708607", "parents": [ "57a95b41869b8f0d1949c24df2a9dac1ca7082ee" ], "author": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Mon Oct 23 16:46:00 2017 -0700" }, "committer": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Fri Oct 27 15:14:41 2017 -0700" }, "message": "Input: gtco - fix potential out-of-bound access\n\nparse_hid_report_descriptor() has a while (i \u003c length) loop, which\nonly guarantees that there\u0027s at least 1 byte in the buffer, but the\nloop body can read multiple bytes which causes out-of-bounds access.\n\nReported-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nReviewed-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e", "tree_diff": [ { "type": "modify", "old_id": "b796e891e2eed22e1ffdac3f3098fdf7afbe4ac6", "old_mode": 33188, "old_path": "drivers/input/tablet/gtco.c", "new_id": "4b8b9d7aa75e2785991fc5838bf55728c715e6fe", "new_mode": 33188, "new_path": "drivers/input/tablet/gtco.c" } ] }