HID: roccat: fix NULL pointer dereference, add range checks

On rare occassions raw events can be triggered before drvdata gets set up
which leads to NULL pointer dereferences. This was only observed with pyra on
2.6.39, but is fixed for all devices now to play it save.
kovaplus returned wrong actual values when profile change was initiated from host.
Added range checks for setting actual profile on all devices.

Signed-off-by: Stefan Achatz <erazor_de@users.sourceforge.net>
Signed-off-by: Jiri Kosina <jkosina@suse.cz>

1 files changed, 4 insertions, 1 deletions

diff --git a/drivers/hid/hid-roccat-kovaplus.c b/drivers/hid/hid-roccat-kovaplus.c
index 212e7921e942..1f8336e3f584 100644
--- a/drivers/hid/hid-roccat-kovaplus.c
+++ b/drivers/hid/hid-roccat-kovaplus.c
@@ -337,7 +337,7 @@ static ssize_t kovaplus_sysfs_set_actual_profile(struct device *dev,
 
         mutex_lock(&kovaplus->kovaplus_lock);
         retval = kovaplus_set_actual_profile(usb_dev, profile);
-        kovaplus->actual_profile = profile;
+        kovaplus_profile_activated(kovaplus, profile);
         mutex_unlock(&kovaplus->kovaplus_lock);
         if (retval)
                 return retval;
@@ -662,6 +662,9 @@ static int kovaplus_raw_event(struct hid_device *hdev,
                         != USB_INTERFACE_PROTOCOL_MOUSE)
                 return 0;
 
+        if (kovaplus == NULL)
+                return 0;
+
         kovaplus_keep_values_up_to_date(kovaplus, data);
 
         if (kovaplus->roccat_claimed)