From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Sun, 7 Jan 2018 20:06:56 +0000 From: Al Viro To: Marcel Holtmann Cc: linux-bluetooth@vger.kernel.org Subject: [bluetooth/hidp] upper bound on hidp_connadd_req->rd_size in HIDPCONNADD Message-ID: <20180107200656.GC13338@ZenIV.linux.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: Al Viro List-ID: Shouldn't it be limited to HID_MAX_DESCRIPTOR_SIZE? Or is it really "anything up to 64Kb"?