]> Gentwo Git Trees - linux/.git/commit
HID: cp2112: Add parameter validation to data length
authorDeepak Sharma <deepak.sharma.472935@gmail.com>
Fri, 26 Sep 2025 14:58:11 +0000 (20:28 +0530)
committerJiri Kosina <jkosina@suse.com>
Tue, 14 Oct 2025 09:46:49 +0000 (11:46 +0200)
commit362f21536966d7039da1de762f28f4ad44565acc
treee0e2767018b5beec65ed4d34042d86467f92c8cd
parent50f1f782f8d621a90108340c632bcb6ab4307d2e
HID: cp2112: Add parameter validation to data length

Syzkaller reported a stack OOB access in cp2112_write_req caused by lack
of parameter validation for the user input in I2C SMBUS ioctl in cp2112
driver

Add the parameter validation for the data->block[0] to be bounded by
I2C_SMBUS_BLOCK_MAX + the additional compatibility padding

[jkosina@suse.com: fix whitespace damage]
Reported-by: syzbot+7617e19c8a59edfbd879@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=7617e19c8a59edfbd879
Tested-by: syzbot+7617e19c8a59edfbd879@syzkaller.appspotmail.com
Signed-off-by: Deepak Sharma <deepak.sharma.472935@gmail.com>
Signed-off-by: Jiri Kosina <jkosina@suse.com>
drivers/hid/hid-cp2112.c