Merge "ANDROID: Bluetooth: hidp: buffer overflow in hidp_process_report"

This commit is contained in:
Linux Build Service Account 2018-07-25 05:33:33 -07:00 committed by Gerrit - the friendly Code Review server
commit 640c42099b

View file

@ -431,8 +431,8 @@ static void hidp_del_timer(struct hidp_session *session)
del_timer(&session->timer);
}
static void hidp_process_report(struct hidp_session *session,
int type, const u8 *data, int len, int intr)
static void hidp_process_report(struct hidp_session *session, int type,
const u8 *data, unsigned int len, int intr)
{
if (len > HID_MAX_BUFFER_SIZE)
len = HID_MAX_BUFFER_SIZE;