Re: [PATCH 2/4] HID: bpf: prevent buffer overflow in hid_hw_request
From: Jiri Kosina
Date: Fri Mar 13 2026 - 12:00:19 EST
On Fri, 13 Mar 2026, Benjamin Tissoires wrote:
> right now the returned value is considered to be always valid. However,
> when playing with HID-BPF, the return value can be arbitrary big,
> because it's the return value of dispatch_hid_bpf_raw_requests(), which
> calls the struct_ops and we have no guarantees that the value makes
> sense.
>
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Benjamin Tissoires <bentiss@xxxxxxxxxx>
Acked-by: Jiri Kosina <jkosina@xxxxxxxx>
--
Jiri Kosina
SUSE Labs