)]}'
{
  "commit": "cb0a3edf8d00740303e5b42e9c0e72d924fc23d2",
  "tree": "b4d66fb1a1964e22510070a049d7da0aadf460a0",
  "parents": [
    "912cb3eac58deadf051138c2021cbb3b0acb14b4"
  ],
  "author": {
    "name": "Dmitry Torokhov",
    "email": "dmitry.torokhov@gmail.com",
    "time": "Sat Dec 07 13:05:18 2019 -0800"
  },
  "committer": {
    "name": "Greg Kroah-Hartman",
    "email": "gregkh@linuxfoundation.org",
    "time": "Tue Jan 14 20:05:44 2020 +0100"
  },
  "message": "HID: hid-input: clear unmapped usages\n\ncommit 4f3882177240a1f55e45a3d241d3121341bead78 upstream.\n\nWe should not be leaving half-mapped usages with potentially invalid\nkeycodes, as that may confuse hidinput_find_key() when the key is located\nby index, which may end up feeding way too large keycode into the VT\nkeyboard handler and cause OOB write there:\n\nBUG: KASAN: global-out-of-bounds in clear_bit include/asm-generic/bitops-instrumented.h:56 [inline]\nBUG: KASAN: global-out-of-bounds in kbd_keycode drivers/tty/vt/keyboard.c:1411 [inline]\nBUG: KASAN: global-out-of-bounds in kbd_event+0xe6b/0x3790 drivers/tty/vt/keyboard.c:1495\nWrite of size 8 at addr ffffffff89a1b2d8 by task syz-executor108/1722\n...\n kbd_keycode drivers/tty/vt/keyboard.c:1411 [inline]\n kbd_event+0xe6b/0x3790 drivers/tty/vt/keyboard.c:1495\n input_to_handler+0x3b6/0x4c0 drivers/input/input.c:118\n input_pass_values.part.0+0x2e3/0x720 drivers/input/input.c:145\n input_pass_values drivers/input/input.c:949 [inline]\n input_set_keycode+0x290/0x320 drivers/input/input.c:954\n evdev_handle_set_keycode_v2+0xc4/0x120 drivers/input/evdev.c:882\n evdev_do_ioctl drivers/input/evdev.c:1150 [inline]\n\nCc: stable@vger.kernel.org\nReported-by: syzbot+19340dff067c2d3835c0@syzkaller.appspotmail.com\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nTested-by: Benjamin Tissoires \u003cbenjamin.tissoires@redhat.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9d24fb0715ba3f25d98e023cc13bf4658c6cfc8b",
      "old_mode": 33188,
      "old_path": "drivers/hid/hid-input.c",
      "new_id": "14e4003fde4dd939878cdc2b98d25f5134faf2cf",
      "new_mode": 33188,
      "new_path": "drivers/hid/hid-input.c"
    }
  ]
}