1. 03 Feb, 2005 37 commits
  2. 02 Feb, 2005 3 commits
    • Hermann Kneissel's avatar
      [PATCH] USB: garmin_gps tweak · 5a6b2f16
      Hermann Kneissel authored
      attached is a new patch for the garmin_gps driver. It only updates my email
      address in the header, as i am in the process of changing my isp and the
      listed address will be offline sometime soon.
      The second change makes the configuration entry look more like the
      other entries in the menu.
      Signed-off-by: default avatarGreg Kroah-Hartman <greg@kroah.com>
      5a6b2f16
    • Andrew Morton's avatar
      [PATCH] USB: Logitech Cordeless Desktop Keyboard fails to report class descriptor · a199f0ff
      Andrew Morton authored
      From: Nico Huber <nico.h@gmx.de>
      
      The receiver of my Logitech Cordeless Desktop fails to report the
      keyboard's class descriptor most times I insert the usb-hid module since I
      changed to linux 2.6.  The modell of the receiver is C-BD9-DUAL REV C.  The
      request seems not to fail but the count of received characters is zero.
      
      As I said it only fails most times, I worked around making the following
      changes in drivers/usb/input/hid-core.c from linux-2.6.11-rc2:
      
      Following the good example of drivers/usb/core/message.c line 575, I
      initialized the buffer in hid_get_class_descriptor() to zero.  In the loop
      of hid_get_class_descriptor() not waiting for any result but waiting for a
      result wich is lower the requested size of the class descriptor (line
      1290).  usb_hid_configure() should not try to parse the expected length but
      the received (line 1653).
      
      Attached is a patch with these changes
      Signed-off-by: default avatarAndrew Morton <akpm@osdl.org>
      Signed-off-by: default avatarGreg Kroah-Hartman <greg@kroah.com>
      a199f0ff
    • Randy Dunlap's avatar
      [PATCH] USB: hid-core: possible buffer overflow in hid-core.c · 672bbf00
      Randy Dunlap authored
      Peter Bartosch wrote:
      > Hello all,
      >
      >
      > i think i found a possible buffer overflow in hid-core (2.6.10-rc2):
      
      Agreed, and sorry it took so long to reply/patch this.
      (from 2004-DEC-01)
      
      > when i interpret this code right, the buffer (buf) will overflow when
      > the iManufacturer stringlength is 0 and the iProduct stringlength
      > is > 64!
      
      Thanks, here's a patch for it.
      
      Fix potential buffer overflow (by a device descriptor):
      buf size is only 64 bytes.
      Signed-off-by: default avatarRandy Dunlap <rddunlap@osdl.org>
      Signed-off-by: default avatarGreg Kroah-Hartman <greg@kroah.com>
      672bbf00