Richard Davies 296736076b Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet ...

Make finger2 (and also finger1) unsigned, so that if the finger index in
the packet is 0 then subtracting 1 creates an array index which overflows
above the existing check for FOC_MAX_FINGERS, as the existing comment says
it should, instead of writing to state->fingers[-1].

Fixes: 05be1d079e ("Input: psmouse - support for the FocalTech PS/2 protocol extensions")
Signed-off-by: Richard Davies <[email protected]>
Link: https://patch.msgid.link/[email protected]
Cc: [email protected]
Signed-off-by: Dmitry Torokhov <[email protected]>

2026-08-02 18:20:24 -07:00

..

alps.c

Input: alps - use standard workqueue when registering supplemental device

2026-03-12 11:16:29 -07:00

alps.h

Input: alps - use standard workqueue when registering supplemental device

2026-03-12 11:16:29 -07:00

amimouse.c

…

appletouch.c

Input: appletouch - refactor endpoint lookup

2026-03-30 16:54:41 -07:00

atarimouse.c

…

bcm5974.c

Merge branch 'next' into for-linus

2026-04-19 18:28:57 -07:00

byd.c

Input: byd - synchronize timer deletion before freeing private data

2026-07-22 11:53:56 -07:00

byd.h

…

cyapa_gen3.c

…

cyapa_gen5.c

Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls

2025-12-13 01:23:01 -08:00

cyapa_gen6.c

…

cyapa.c

Input: Use named initializers for arrays of i2c_device_data

2026-05-30 22:10:47 -07:00

cyapa.h

…

cypress_ps2.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

cypress_ps2.h

…

elan_i2c_core.c

Input: elan_i2c - prevent division by zero and arithmetic underflow

2026-06-22 22:33:02 -07:00

elan_i2c_i2c.c

Input: elan_i2c - increase device reset wait timeout after update FW

2026-04-23 10:36:46 -07:00

elan_i2c_smbus.c

…

elan_i2c.h

…

elantech.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

elantech.h

…

focaltech.c

Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

2026-08-02 18:20:24 -07:00

focaltech.h

…

gpio_mouse.c

…

Kconfig

Merge tag 'input-for-v7.1-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2026-04-22 18:36:40 -07:00

lifebook.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

lifebook.h

…

logips2pp.c

…

logips2pp.h

…

Makefile

Merge tag 'input-for-v7.1-rc0' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

2026-04-22 18:36:40 -07:00

maplemouse.c

Input: maplemouse - set driver data before registering input device

2026-07-02 22:48:57 -07:00

psmouse-base.c

Input: psmouse - remove dedicated kpsmoused workqueue

2026-03-12 11:16:30 -07:00

psmouse-smbus.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

psmouse.h

Input: psmouse - remove dedicated kpsmoused workqueue

2026-03-12 11:16:30 -07:00

rpcmouse.c

…

sentelic.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

sentelic.h

…

sermouse.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

synaptics_i2c.c

Input: Use named initializers for arrays of i2c_device_data

2026-05-30 22:10:47 -07:00

synaptics_usb.c

Input: synaptics_usb - refactor endpoint lookup

2026-03-30 16:54:41 -07:00

synaptics.c

Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490

2026-05-13 21:43:04 -07:00

synaptics.h

…

touchkit_ps2.c

…

touchkit_ps2.h

…

trackpoint.c

input: trackpoint - Enable doubletap by default on capable devices

2026-03-17 15:27:22 +02:00

trackpoint.h

input: trackpoint - Enable doubletap by default on capable devices

2026-03-17 15:27:22 +02:00

vmmouse.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

vmmouse.h

…

vsxxxaa.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00