Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757197Ab3IKULb (ORCPT ); Wed, 11 Sep 2013 16:11:31 -0400 Received: from mail-oa0-f52.google.com ([209.85.219.52]:42710 "EHLO mail-oa0-f52.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754242Ab3IKUL3 (ORCPT ); Wed, 11 Sep 2013 16:11:29 -0400 MIME-Version: 1.0 In-Reply-To: <1378929419-6269-1-git-send-email-benjamin.tissoires@redhat.com> References: <1378929419-6269-1-git-send-email-benjamin.tissoires@redhat.com> Date: Wed, 11 Sep 2013 13:11:28 -0700 X-Google-Sender-Auth: VKfk3bMYr3zEOf6pcdCJUaQYqog Message-ID: Subject: Re: [PATCH v3 00/10] HID: validate report details From: Kees Cook To: Benjamin Tissoires Cc: Benjamin Tissoires , Henrik Rydberg , Jiri Kosina , linux-input , LKML Content-Type: text/plain; charset=ISO-8859-1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 964 Lines: 32 On Wed, Sep 11, 2013 at 12:56 PM, Benjamin Tissoires wrote: > Hi guys, > > here is the v3 of the CVE fixes. > > I have tested the multitouch and logitech-dj part, and the lenovo-tpkbd has been > tested in the bug referenced in patch 10. > > Cheers, > Benjamin > > Changes since v2: > - fix lenovo-tpkbd report validation > - fix lenovo-tpkbd not releasing the device when the report was not valid > - use generic tests found in previous hid-multitouch patches, so that this will > not happen again > - fix input_report index retrieving in hid-multitouch Awesome! Thanks very much for fixing these up. I replied with Acks where appropriate. :) -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/