[ Sasha's backport helper bot ]
Hi,
Summary of potential issues: ⚠️ Found matching upstream commit but patch is missing proper reference to it
Found matching upstream commit: fe7f7ac8e0c708446ff017453add769ffc15deed
Status in newer kernel trees: 6.15.y | Present (different SHA1: 6dffa4488614) 6.12.y | Present (different SHA1: 549d235f4f07) 6.6.y | Present (different SHA1: cd2287ce05d8) 6.1.y | Present (different SHA1: 345ab0a1113c)
Note: The patch differs from the upstream commit: --- 1: fe7f7ac8e0c70 ! 1: 46a4432fb0033 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() @@ Commit message Signed-off-by: Terry Junge linuxhid@cosmicgizmosystems.com Reviewed-by: Michael Kelley mhklinux@outlook.com Signed-off-by: Jiri Kosina jkosina@suse.com + (cherry picked from commit fe7f7ac8e0c708446ff017453add769ffc15deed) + Signed-off-by: Terry Junge linuxhid@cosmicgizmosystems.com
## drivers/hid/hid-hyperv.c ## @@ drivers/hid/hid-hyperv.c: static void mousevsc_on_receive_device_info(struct mousevsc_dev *input_device, + if (!input_device->hid_desc) goto cleanup;
- input_device->report_desc_size = le16_to_cpu( -- desc->desc[0].wDescriptorLength); +- input_device->report_desc_size = desc->desc[0].wDescriptorLength; ++ input_device->report_desc_size = le16_to_cpu( + desc->rpt_desc.wDescriptorLength); if (input_device->report_desc_size == 0) { input_device->dev_info_status = -EINVAL; @@ drivers/hid/hid-hyperv.c: static void mousevsc_on_receive_device_info(struct mou
memcpy(input_device->report_desc, ((unsigned char *)desc) + desc->bLength, -- le16_to_cpu(desc->desc[0].wDescriptorLength)); +- desc->desc[0].wDescriptorLength); + le16_to_cpu(desc->rpt_desc.wDescriptorLength));
/* Send the ack */ ---
Results of testing on various branches:
| Branch | Patch Apply | Build Test | |---------------------------|-------------|------------| | stable/linux-5.15.y | Success | Success |