Re: [PATCH] Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
Dmitry Torokhov <[email protected]> Sun, 2 Aug 2026 18:21:14 -0700
| Newsgroups | org.kernel.vger.linux-input |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jul 01, 2026 at 08:09:32PM +0100, Richard Davies wrote:
> Make finger2 (and also finger1) unsigned, so that if the finger index in
> the packet is 0 then subtracting 1 creates an array index which overflows
> above the existing check for FOC_MAX_FINGERS, as the existing comment says
> it should, instead of writing to state->fingers[-1].
>
> Fixes: 05be1d079ec0 ("Input: psmouse - support for the FocalTech PS/2 protocol extensions")
> Signed-off-by: Richard Davies <[email protected]>
Applied, thank you. Sorry for the delay.
--
Dmitry