Bug 217417
| Summary: | [input/mouse] elan_i2c.h and elantech.h array subscript index 5 is out of bound ETP_MAX_FINGERS | ||
|---|---|---|---|
| Product: | Drivers | Reporter: | Jon Daniel (jondaniel879) |
| Component: | Input Devices | Assignee: | drivers_input-devices |
| Status: | RESOLVED CODE_FIX | ||
| Severity: | normal | CC: | bagasdotme, dmitry.torokhov |
| Priority: | P3 | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Kernel Version: | 6.3.1-6.3.5 | Subsystem: | |
| Regression: | No | Bisected commit-id: | |
| Attachments: |
dmesg syslog output
elantech finger bug dmesg [PATCH] Input: psmouse - fix OOB access in Elantech protocol from Dmitry Torokhov <dmitry.torokhov@gmail.com> |
||
Incrementing ETP_MAX_FINGERS by one to 6 might be sufficient. What kernel version did this issue occur? Last known good version? lspci/lsusb? fixed in 6.3.5 and above the only difference seems to be the ignore list addition I apologize for the last posts the statements are not correct. I don't know which version introduced the bug that is still present in the current version of the linux kernel Created attachment 304367 [details]
elantech finger bug dmesg
Created attachment 304369 [details] [PATCH] Input: psmouse - fix OOB access in Elantech protocol from Dmitry Torokhov <dmitry.torokhov@gmail.com> Fixed in 6.4. |
Created attachment 304230 [details] dmesg syslog output