Junjie Cao 84e4d35431 Input: ti_am335x_tsc - fix off-by-one error in wire_order validation ...

commit 248d3a73a0 upstream.

The current validation 'wire_order[i] > ARRAY_SIZE(config_pins)' allows
wire_order[i] to equal ARRAY_SIZE(config_pins), which causes out-of-bounds
access when used as index in 'config_pins[wire_order[i]]'.

Since config_pins has 4 elements (indices 0-3), the valid range for
wire_order should be 0-3. Fix the off-by-one error by using >= instead
of > in the validation check.

Signed-off-by: Junjie Cao <junjie.cao@intel.com>
Link: https://patch.msgid.link/20251114062817.852698-1-junjie.cao@intel.com
Fixes: bb76dc09dd ("input: ti_am33x_tsc: Order of TSC wires, made configurable")
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-08 10:14:06 +01:00

..

88pm860x-ts.c

…

ad7877.c

…

ad7879-i2c.c

…

ad7879-spi.c

…

ad7879.c

…

ad7879.h

…

ads7846.c

…

ar1021_i2c.c

…

atmel_mxt_ts.c

Input: atmel_mxt_ts - allow reset GPIO to sleep

2025-10-15 12:00:23 +02:00

auo-pixcir-ts.c

…

bcm_iproc_tsc.c

…

bu21013_ts.c

…

bu21029_ts.c

…

chipone_icn8318.c

…

chipone_icn8505.c

…

colibri-vf50-ts.c

…

cy8ctma140.c

…

cy8ctmg110_ts.c

…

cyttsp5.c

Input: cyttsp5 - fix power control issue on wakeup

2025-05-18 08:24:50 +02:00

cyttsp_core.c

…

cyttsp_core.h

…

cyttsp_i2c.c

…

cyttsp_spi.c

…

da9034-ts.c

…

da9052_tsi.c

…

dynapro.c

…

edt-ft5x06.c

…

eeti_ts.c

…

egalax_ts_serial.c

…

egalax_ts.c

…

ektf2127.c

…

elants_i2c.c

…

elo.c

…

exc3000.c

…

fsl-imx25-tcq.c

…

fujitsu_ts.c

…

goodix_berlin_core.c

…

goodix_berlin_i2c.c

…

goodix_berlin_spi.c

…

goodix_berlin.h

…

goodix_fwupload.c

…

goodix.c

Input: goodix - add support for ACPI ID GDIX1003

2025-12-01 11:43:23 +01:00

goodix.h

…

gunze.c

…

hampshire.c

…

hideep.c

…

himax_hx83112b.c

…

hp680_ts_input.c

…

htcpen.c

…

hycon-hy46xx.c

…

hynitron_cstxxx.c

…

ili210x.c

…

ilitek_ts_i2c.c

…

imagis.c

…

imx6ul_tsc.c

…

inexio.c

…

ipaq-micro-ts.c

…

iqs5xx.c

…

iqs7211.c

…

jornada720_ts.c

…

Kconfig

…

lpc32xx_ts.c

…

mainstone-wm97xx.c

…

Makefile

…

max11801_ts.c

…

mc13783_ts.c

…

melfas_mip4.c

…

migor_ts.c

…

mk712.c

…

mms114.c

…

msg2638.c

…

mtouch.c

…

mxs-lradc-ts.c

…

novatek-nvt-ts.c

…

pcap_ts.c

…

penmount.c

…

pixcir_i2c_ts.c

…

raspberrypi-ts.c

…

raydium_i2c_ts.c

…

resistive-adc-touch.c

…

rohm_bu21023.c

…

s6sy761.c

…

silead.c

…

sis_i2c.c

…

st1232.c

…

stmfts.c

…

stmpe-ts.c

…

sun4i-ts.c

…

sur40.c

…

surface3_spi.c

…

sx8654.c

…

ti_am335x_tsc.c

Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

2026-01-08 10:14:06 +01:00

touchit213.c

…

touchright.c

…

touchwin.c

…

tps6507x-ts.c

…

ts4800-ts.c

…

tsc40.c

…

tsc200x-core.c

…

tsc200x-core.h

…

tsc2004.c

…

tsc2005.c

…

tsc2007_core.c

…

tsc2007_iio.c

…

tsc2007.h

…

usbtouchscreen.c

…

wacom_i2c.c

…

wacom_w8001.c

…

wdt87xx_i2c.c

…

wm97xx-core.c

…

wm831x-ts.c

…

wm9705.c

…

wm9712.c

…

wm9713.c

…

zet6223.c

…

zforce_ts.c

…

zinitix.c

…