Tetsuo Handa 99d3bf5f73 Input: MT - limit max slots ...

syzbot is reporting too large allocation at input_mt_init_slots(), for
num_slots is supplied from userspace using ioctl(UI_DEV_CREATE).

Since nobody knows possible max slots, this patch chose 1024.

Reported-by: syzbot <[email protected]>
Closes: https://syzkaller.appspot.com/bug?extid=0122fa359a69694395d5
Suggested-by: Dmitry Torokhov <[email protected]>
Signed-off-by: Tetsuo Handa <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

2024-07-29 10:44:48 -07:00

..

gameport

Merge tag 'driver-core-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-07-25 10:42:22 -07:00

joystick

Merge tag 'input-for-v6.11-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-07-19 16:51:39 -07:00

keyboard

Input: omap-keypad - use driver core to instantiate device attributes

2024-07-12 17:15:29 -07:00

misc

Merge tag 'input-for-v6.11-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-07-19 16:51:39 -07:00

mouse

Merge tag 'input-for-v6.11-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-07-19 16:51:39 -07:00

rmi4

driver core: have match() callback in struct bus_type take a const *

2024-07-03 15:16:54 +02:00

serio

Merge tag 'driver-core-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core

2024-07-25 10:42:22 -07:00

tablet

Input: tablet - use sizeof(*pointer) instead of sizeof(type)

2024-06-02 21:32:03 -07:00

tests

Merge tag 'input-for-v6.11-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2024-07-19 16:51:39 -07:00

touchscreen

minmax: don't use max() in situations that want a C constant expression

2024-07-28 20:23:27 -07:00

apm-power.c

…

evbug.c

…

evdev.c

Input: make events() method return number of events processed

2024-07-08 16:22:49 -07:00

ff-core.c

Input: ff-core - prefer struct_size over open coded arithmetic

2024-04-30 14:04:31 -07:00

ff-memless.c

…

input-compat.c

…

input-compat.h

…

input-core-private.h

…

input-leds.c

Input: leds - change config symbol dependency for audio mute trigger

2024-03-03 14:46:06 -08:00

input-mt.c

Input: MT - limit max slots

2024-07-29 10:44:48 -07:00

input-poller.c

…

input-poller.h

…

input.c

Input: do not check number of events in input_pass_values()

2024-07-08 16:22:49 -07:00

joydev.c

…

Kconfig

…

Makefile

…

matrix-keymap.c

Input: add missing MODULE_DESCRIPTION() macros

2024-06-09 14:38:48 -07:00

mousedev.c

…

sparse-keymap.c

…

touchscreen.c

…

vivaldi-fmap.c

Input: add missing MODULE_DESCRIPTION() macros

2024-06-09 14:38:48 -07:00