diff options
| author | Pengpeng Hou <pengpeng@iscas.ac.cn> | 2026-04-06 21:52:34 -0700 |
|---|---|---|
| committer | Dmitry Torokhov <dmitry.torokhov@gmail.com> | 2026-04-06 22:10:55 -0700 |
| commit | 95dffe32a66cbed07fbfa7afed39d56d5014e04f (patch) | |
| tree | f20ffda00fb5c8e66b01663935ae9c15099eb236 /include/linux/timerqueue.h | |
| parent | bc561dc8ba5b9fe56ed1757bdad218c9a0f992f1 (diff) | |
Input: aiptek - validate raw macro indices before updating state
aiptek_irq() derives macro key indices directly from tablet reports and
then uses them to index macroKeyEvents[]. Report types 4 and 5 also save
the derived value in aiptek->lastMacro and later use that state to
release the previous key.
Validate the raw macro index once before it enters that state machine, so
lastMacro only ever stores an in-range macro key. Keep direct bounds
checks for report type 6, which reads the macro number from the packet
body and uses it immediately.
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Link: https://patch.msgid.link/20260329001711.88076-1-pengpeng@iscas.ac.cn
[dtor: fix macro fallback in report 5s to use -1]
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Diffstat (limited to 'include/linux/timerqueue.h')
0 files changed, 0 insertions, 0 deletions
