HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
authorLee Jones <lee.jones@linaro.org>
Fri, 8 Jul 2022 07:40:09 +0000 (08:40 +0100)
committerJiri Kosina <jkosina@suse.cz>
Thu, 25 Aug 2022 08:22:15 +0000 (10:22 +0200)
commitcd11d1a6114bd4bc6450ae59f6e110ec47362126
tree2e8cd6a339dea5ae44c8930b78731e801d5203bd
parent8d9420ca9bd9bceddcfab3d0263d6a8e073396fe
HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

It is possible for a malicious device to forgo submitting a Feature
Report.  The HID Steam driver presently makes no prevision for this
and de-references the 'struct hid_report' pointer obtained from the
HID devices without first checking its validity.  Let's change that.

Cc: Jiri Kosina <jikos@kernel.org>
Cc: Benjamin Tissoires <benjamin.tissoires@redhat.com>
Cc: linux-input@vger.kernel.org
Fixes: c164d6abf3841 ("HID: add driver for Valve Steam Controller")
Signed-off-by: Lee Jones <lee.jones@linaro.org>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>
drivers/hid/hid-steam.c