github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-05-28 17:13:52 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

Browse Source 
In commit 2ff5baa9b5 ("HID: appleir: Fix potential NULL dereference at
raw event handle"), we handle the fact that raw event callbacks
can happen even for a HID device that has not been "claimed" causing a
crash if a broken device were attempted to be connected to the system.

Fix up the remaining in-tree HID drivers that forgot to add this same
check to resolve the same issue.

Cc: Jiri Kosina <jikos@kernel.org>
Cc: Benjamin Tissoires <bentiss@kernel.org>
Cc: Bastien Nocera <hadess@hadess.net>
Cc: linux-input@vger.kernel.org
Cc: stable <stable@kernel.org>
Assisted-by: gkh_clanker_2000
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
This commit is contained in:
Greg Kroah-Hartman 2026-02-19 15:33:54 +01:00 committed by Benjamin Tissoires
parent 2bad24c177
commit ecfa6f3449
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/hid/hid-cmedia.c
View File

@ -99,7 +99,7 @@ static int cmhid_raw_event(struct hid_device *hid, struct hid_report *report,
{ {
struct cmhid *cm = hid_get_drvdata(hid); struct cmhid *cm = hid_get_drvdata(hid);
if (len != CM6533_JD_RAWEV_LEN) if (len != CM6533_JD_RAWEV_LEN || !(hid->claimed & HID_CLAIMED_INPUT))
goto out; goto out;
if (memcmp(data+CM6533_JD_SFX_OFFSET, ji_sfx, sizeof(ji_sfx))) if (memcmp(data+CM6533_JD_SFX_OFFSET, ji_sfx, sizeof(ji_sfx)))
goto out; goto out;

2
drivers/hid/hid-creative-sb0540.c
View File

@ -153,7 +153,7 @@ static int creative_sb0540_raw_event(struct hid_device *hid,
u64 code, main_code; u64 code, main_code;
int key; int key;
if (len != 6) if (len != 6 || !(hid->claimed & HID_CLAIMED_INPUT))
return 0; return 0;
/* From daemons/hw_hiddev.c sb0540_rec() in lirc */ /* From daemons/hw_hiddev.c sb0540_rec() in lirc */

2
drivers/hid/hid-zydacron.c
View File

@ -114,7 +114,7 @@ static int zc_raw_event(struct hid_device *hdev, struct hid_report *report,
unsigned key; unsigned key;
unsigned short index; unsigned short index;
if (report->id == data[0]) { if (report->id == data[0] && (hdev->claimed & HID_CLAIMED_INPUT)) {
/* break keys */ /* break keys */
for (index = 0; index < 4; index++) { for (index = 0; index < 4; index++) {