Skip to content

Commit

Permalink
HID: rmi: Check that the device is a RMI device in suspend and resume…
Browse files Browse the repository at this point in the history
… callbacks

Commit 0925636 ("HID: rmi: Disable scanning if the device is not a wake
source") introduced a regression for devices which use hid-rmi to handle
composite USB devices. The suspend or resume callbacks are not checking
that the device is a RMI device before calling rmi_read or rmi_write.
This results in dereferencing uninitialized variables on non RMI devices. This
patch checks that the RMI_DEVICE flag is set before sending RMI commands to the
device.

Reported-by: Rodrigo Gomes <[email protected]>
Signed-off-by: Andrew Duggan <[email protected]>
Signed-off-by: Jiri Kosina <[email protected]>
  • Loading branch information
aduggan-syna authored and Jiri Kosina committed Jan 27, 2016
1 parent 962b7a0 commit b786ae8
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions drivers/hid/hid-rmi.c
Original file line number Diff line number Diff line change
Expand Up @@ -594,6 +594,9 @@ static int rmi_suspend(struct hid_device *hdev, pm_message_t message)
int ret;
u8 buf[RMI_F11_CTRL_REG_COUNT];

if (!(data->device_flags & RMI_DEVICE))
return 0;

ret = rmi_read_block(hdev, data->f11.control_base_addr, buf,
RMI_F11_CTRL_REG_COUNT);
if (ret)
Expand All @@ -613,6 +616,9 @@ static int rmi_post_reset(struct hid_device *hdev)
struct rmi_data *data = hid_get_drvdata(hdev);
int ret;

if (!(data->device_flags & RMI_DEVICE))
return 0;

ret = rmi_reset_attn_mode(hdev);
if (ret) {
hid_err(hdev, "can not set rmi mode\n");
Expand Down Expand Up @@ -640,6 +646,11 @@ static int rmi_post_reset(struct hid_device *hdev)

static int rmi_post_resume(struct hid_device *hdev)
{
struct rmi_data *data = hid_get_drvdata(hdev);

if (!(data->device_flags & RMI_DEVICE))
return 0;

return rmi_reset_attn_mode(hdev);
}
#endif /* CONFIG_PM */
Expand Down

0 comments on commit b786ae8

Please sign in to comment.