1. 02 Aug, 2022 6 commits
  2. 23 Jul, 2022 2 commits
  3. 22 Jul, 2022 2 commits
  4. 21 Jul, 2022 17 commits
  5. 15 Jun, 2022 5 commits
  6. 09 Jun, 2022 2 commits
    • Tao Jin's avatar
      HID: multitouch: new device class fix Lenovo X12 trackpad sticky · 54eed5c7
      Tao Jin authored
      The trackpad of the given device sends continuous report of pointers
      status as per wxn8 spec. However, the spec did not clarify when the
      fingers are lifted so fast that between the interval of two report
      frames fingers on pad reduced from >=2 to 0. The second last report
      contains >=2 fingers with tip state 1 and the last report contains only
      1 finger with tip state 0. Although this can happen unfrequently, a
        quick fix will be improve the consistency to 100%. A quick fix is to
      disable MT_QUIRK_ALWAYS_VALID and enable MT_QUIRK_NOT_SEEN_MEANS_UP.
      
      Test for hid-tools is added in [1]
      
      In addition to this, I2C device 04CA:00B1 may also need similar class
      but with MT_QUIRK_FORCE_MULTI_INPUT disabled (but it does not harm to
       enable it on non-multi-input device either). The respective owner has
      been notified and a patch may coming soon after test.
      
      [1]: https://gitlab.freedesktop.org/libevdev/hid-tools/-/merge_requests/130Signed-off-by: default avatarTao Jin <tao-j@outlook.com>
      Signed-off-by: default avatarJiri Kosina <jkosina@suse.cz>
      54eed5c7
    • Harshit Mogalapalli's avatar
      HID: cp2112: prevent a buffer overflow in cp2112_xfer() · 38158384
      Harshit Mogalapalli authored
      Smatch warnings:
      drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy()
      'data->block[1]' too small (33 vs 255)
      drivers/hid/hid-cp2112.c:793 cp2112_xfer() error: __memcpy() 'buf' too
      small (64 vs 255)
      
      The 'read_length' variable is provided by 'data->block[0]' which comes
      from user and it(read_length) can take a value between 0-255. Add an
      upper bound to 'read_length' variable to prevent a buffer overflow in
      memcpy().
      
      Fixes: 542134c0 ("HID: cp2112: Fix I2C_BLOCK_DATA transactions")
      Signed-off-by: default avatarHarshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
      Signed-off-by: default avatarJiri Kosina <jkosina@suse.cz>
      38158384
  7. 08 Jun, 2022 6 commits