mirror of
https://gitlab.freedesktop.org/libinput/libinput.git
synced 2026-06-10 02:08:20 +02:00
A malicious uinput device could set the phys value (via UI_SET_PHYS) to contain a '\n'. When the value is printed as part of the device group the udev rules will interpret it as separate property. Depending on the property this can cause local privilege escalation. Closes #1296 Found-by: Csome Part-of: <https://gitlab.freedesktop.org/libinput/libinput/-/merge_requests/1487> |
||
|---|---|---|
| .. | ||
| 80-libinput-device-groups.rules.in | ||
| 90-libinput-fuzz-override.rules.in | ||
| libinput-device-group.c | ||
| libinput-fuzz-extract.c | ||
| libinput-fuzz-to-zero.c | ||