)]}'
{
  "commit": "f1c7d333572578400a5a9f8be51218de05375246",
  "tree": "0e56c0dcf4a60a1a17be2a73d5b36c9b025149e8",
  "parents": [
    "6bc514f935f8fe39becb3ca915695caa4604de62"
  ],
  "author": {
    "name": "Pietro Borrello",
    "email": "borrello@diag.uniroma1.it",
    "time": "Sun Feb 12 00:01:44 2023 +0000"
  },
  "committer": {
    "name": "Wilson Sung",
    "email": "wilsonsung@google.com",
    "time": "Thu May 04 10:52:39 2023 +0000"
  },
  "message": "UPSTREAM: hid: bigben_probe(): validate report count\n\n[ Upstream commit b94335f899542a0da5fafc38af8edcaf90195843 ]\n\nbigben_probe() does not validate that the output report has the\nneeded report values in the first field.\nA malicious device registering a report with one field and a single\nvalue causes an head OOB write in bigben_worker() when\naccessing report_field-\u003evalue[1] to report_field-\u003evalue[7].\nUse hid_validate_values() which takes care of all the needed checks.\n\nBug: 268589017\nFixes: 256a90ed9e46 (\"HID: hid-bigbenff: driver for BigBen Interactive PS3OFMINIPAD gamepad\")\nBug: 280751063\nSigned-off-by: Pietro Borrello \u003cborrello@diag.uniroma1.it\u003e\nLink: https://lore.kernel.org/r/20230211-bigben-oob-v1-1-d2849688594c@diag.uniroma1.it\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@redhat.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Lee Jones \u003cjoneslee@google.com\u003e\nSigned-off-by: Wilson Sung \u003cwilsonsung@google.com\u003e\nChange-Id: I575c5d4c8a63a2065752a45c47b23cf725cc57ae\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9d6560db762b1e17509dcc0f60b44ddeac511631",
      "old_mode": 33188,
      "old_path": "drivers/hid/hid-bigbenff.c",
      "new_id": "a02cb517b4c47a28b74df9dc25ecfd0f238a8644",
      "new_mode": 33188,
      "new_path": "drivers/hid/hid-bigbenff.c"
    }
  ]
}