linux/drivers/hid/intel-thc-hid/intel-quickspi
Even Xu a1cdd72371 HID: Intel-thc-hid: Intel-quickspi: Fix buffer overflow
The input buffers are used to store complete HID-over-SPI packets,
including their protocol headers. However, their sizes are
currently calculated from the payload length only.

Allocate enough space for both the payload and the packet header to
prevent a buffer overflow when the payload reaches its maximum size.

Signed-off-by: Even Xu <even.xu@intel.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
2026-09-23 18:48:30 +02:00
..
pci-quickspi.c HID: Intel-thc-hid: Intel-quickspi: Fix buffer overflow 2026-09-23 18:48:30 +02:00
quickspi-dev.h Merge branch 'for-7.3/intel-thc-hid' into for-linus 2026-08-19 09:23:04 +02:00
quickspi-hid.c HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer 2026-08-14 15:50:11 +02:00
quickspi-hid.h
quickspi-protocol.c Merge branch 'for-7.3/intel-thc-hid' into for-linus 2026-08-19 09:23:04 +02:00
quickspi-protocol.h HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer 2026-08-14 15:50:11 +02:00