linux/drivers/input/mouse
Richard Davies 296736076b Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
Make finger2 (and also finger1) unsigned, so that if the finger index in
the packet is 0 then subtracting 1 creates an array index which overflows
above the existing check for FOC_MAX_FINGERS, as the existing comment says
it should, instead of writing to state->fingers[-1].

Fixes: 05be1d079e ("Input: psmouse - support for the FocalTech PS/2 protocol extensions")
Signed-off-by: Richard Davies <richard@arachsys.com>
Link: https://patch.msgid.link/20260701190932.14960-1-richard@arachsys.com
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
2026-08-02 18:20:24 -07:00
..
alps.c Input: alps - use standard workqueue when registering supplemental device 2026-03-12 11:16:29 -07:00
alps.h Input: alps - use standard workqueue when registering supplemental device 2026-03-12 11:16:29 -07:00
amimouse.c Input: switch back to struct platform_driver::remove() 2024-10-15 11:43:25 -07:00
appletouch.c Input: appletouch - refactor endpoint lookup 2026-03-30 16:54:41 -07:00
atarimouse.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
bcm5974.c Merge branch 'next' into for-linus 2026-04-19 18:28:57 -07:00
byd.c Input: byd - synchronize timer deletion before freeing private data 2026-07-22 11:53:56 -07:00
byd.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
cyapa_gen3.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
cyapa_gen5.c Input: cyapa - remove redundant pm_runtime_mark_last_busy() calls 2025-12-13 01:23:01 -08:00
cyapa_gen6.c move asm/unaligned.h to linux/unaligned.h 2024-10-02 17:23:23 -04:00
cyapa.c Input: Use named initializers for arrays of i2c_device_data 2026-05-30 22:10:47 -07:00
cyapa.h Input: cyapa - fix for losing events during device power transitions 2016-03-04 11:32:13 -08:00
cypress_ps2.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
cypress_ps2.h Input: cypress_ps2 - fix error handling when sending command fails 2024-07-03 13:48:53 -07:00
elan_i2c_core.c Input: elan_i2c - prevent division by zero and arithmetic underflow 2026-06-22 22:33:02 -07:00
elan_i2c_i2c.c Input: elan_i2c - increase device reset wait timeout after update FW 2026-04-23 10:36:46 -07:00
elan_i2c_smbus.c Merge branch 'next' into for-linus 2020-12-14 16:27:23 -08:00
elan_i2c.h Input: elan_i2c - reduce the resume time for controller in Whitebox 2021-09-06 22:30:34 -07:00
elantech.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
elantech.h Input: elantech - fix protocol errors for some trackpoints in SMBus mode 2020-12-11 00:15:05 -08:00
focaltech.c Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet 2026-08-02 18:20:24 -07:00
focaltech.h treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152 2019-05-30 11:26:32 -07:00
gpio_mouse.c Input: gpio_mouse - fix typos in comments 2022-06-22 15:29:35 -07:00
Kconfig Input updates for v7.1-rc0 2026-04-22 18:36:40 -07:00
lifebook.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
lifebook.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
logips2pp.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
logips2pp.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
Makefile Input updates for v7.1-rc0 2026-04-22 18:36:40 -07:00
maplemouse.c Input: maplemouse - set driver data before registering input device 2026-07-02 22:48:57 -07:00
psmouse-base.c Input: psmouse - remove dedicated kpsmoused workqueue 2026-03-12 11:16:30 -07:00
psmouse-smbus.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
psmouse.h Input: psmouse - remove dedicated kpsmoused workqueue 2026-03-12 11:16:30 -07:00
rpcmouse.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 2019-06-19 17:09:55 +02:00
sentelic.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
sentelic.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
sermouse.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
synaptics_i2c.c Input: Use named initializers for arrays of i2c_device_data 2026-05-30 22:10:47 -07:00
synaptics_usb.c Input: synaptics_usb - refactor endpoint lookup 2026-03-30 16:54:41 -07:00
synaptics.c Input: synaptics - add LEN2058 to SMBus passlist for ThinkPad E490 2026-05-13 21:43:04 -07:00
synaptics.h Input: synaptics - fix crash when enabling pass-through port 2025-01-20 21:27:02 -08:00
touchkit_ps2.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 61 2019-05-24 17:36:45 +02:00
touchkit_ps2.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
trackpoint.c input: trackpoint - Enable doubletap by default on capable devices 2026-03-17 15:27:22 +02:00
trackpoint.h input: trackpoint - Enable doubletap by default on capable devices 2026-03-17 15:27:22 +02:00
vmmouse.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
vmmouse.h Input: psmouse - drop all unneeded functions from mouse headers 2019-08-20 14:15:36 -07:00
vsxxxaa.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00