]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-client.git/commit
HID: multitouch: Check to ensure report responses match the request
authorLee Jones <lee@kernel.org>
Fri, 27 Feb 2026 16:30:25 +0000 (16:30 +0000)
committerBenjamin Tissoires <bentiss@kernel.org>
Tue, 17 Mar 2026 10:36:16 +0000 (11:36 +0100)
commite716edafedad4952fe3a4a273d2e039a84e8681a
tree0cdcea7537049f1fe7240da4e6575273748cbba3
parentf7a4c78bfeb320299c1b641500fe7761eadbd101
HID: multitouch: Check to ensure report responses match the request

It is possible for a malicious (or clumsy) device to respond to a
specific report's feature request using a completely different report
ID.  This can cause confusion in the HID core resulting in nasty
side-effects such as OOB writes.

Add a check to ensure that the report ID in the response, matches the
one that was requested.  If it doesn't, omit reporting the raw event and
return early.

Signed-off-by: Lee Jones <lee@kernel.org>
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
drivers/hid/hid-multitouch.c