From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-dy1-f182.google.com (mail-dy1-f182.google.com [74.125.82.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C515B35AC12 for ; Fri, 26 Jun 2026 05:18:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.82.182 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782451089; cv=none; b=C5PBdked/VgSajOXG7Z3OK2S6VDE7hegLmuJQlKOTtfT4i4jhKGq/avwZz2X7gAnpyc21V8BgK8zjp19uJeTdaRnfLIrjo2GgTQEXZokijkf5KqBA2M2IGe/EfJZFTO7BWn5O1rQloYrQ5kXAT34zFsjtiSkxLhETo+5uGB3XEA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782451089; c=relaxed/simple; bh=I6ywcvU0qgxYw4mz0/EU2EY3eWlSEgHBFxkPAYQzJuM=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=BtfptahvT2qpwcKx+fQ6hNwA7fZVZnbwECi4PyEIAcp58lHZ7xQmRRxqrG52j3LTb2LD3wo6dPBV+HmZqrvBoy2sHg1zTNoktjDfmIHJB12sqPkPmJHvpY4DF6pneSSy3zXZt06mcm1NtFGM8252nf+iadx0hrKWGNUVoTuYdZ8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=J8DEIoNh; arc=none smtp.client-ip=74.125.82.182 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="J8DEIoNh" Received: by mail-dy1-f182.google.com with SMTP id 5a478bee46e88-30c944aacbaso873891eec.1 for ; Thu, 25 Jun 2026 22:18:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1782451087; x=1783055887; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=9cLX/dU3BOyjaBvtaeDIxgiaeXykFIfqTUE3z5v9c3w=; b=J8DEIoNhxzGKe9/2W0f6zlX2Y1PN59vqKRDBf1+doV2JvLuH9zYlgxuPkz6AyuKff/ gLC2pUfcLXanfWXCwu5XMv1NPYy4xwg1Ad+/xVfAJqm7NjDYqIoJgTCX24Rbya/TTGaA C/aO8RPGJpjuV8elVwg2hqnCR2wNtKf4PRcHT8pyqOGTLqi1Z4hSKvHSprxfEAWsXoKb fkP4rOY88Jgjd5ZfL7Gc3EIkoBtIIBQO+9FECqKGCEJ22EHWZKWjQ3Q39jnSWqZgccPS Pa+V3QzTo3n4L4uY7rnbnhW3CueMR5DVoY2/izNLVD4XhxDBN477hdWAiwUZ3Csu0w5T Ua0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782451087; x=1783055887; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=9cLX/dU3BOyjaBvtaeDIxgiaeXykFIfqTUE3z5v9c3w=; b=DPaRTsk0gqFlsq/ir/CfMPl0d9jbfTVau1r/UsP3DUK+W9pDzUNb6TWwyGyarO8tVK nI/0fSvPuc5z4tdqwzm9nzck+Ucqa0L8CrSV0Awe2a1dt15R3+OZ6U6iUgNuhe/E2Gij BxLbUtSJq7biAVFyJEQgUhmPgBw/qPKUdwdcYz+HTXly+MNdunmVK7FhQYCvSoOWyiz6 qdZId5I/4aXceBUwhhLfYpRbWuYEDVTMZlGTa13DfrOJyZ/0nfLqPtEGzBqpz6zIG3L6 QHaKIaX5DknQE+kKobgfu6gZLRN5bMZDECoOR+JbfuoqFtvrnm0v1EcTIrMi/HVOX6bd bIQQ== X-Forwarded-Encrypted: i=1; AHgh+Roa6rnGrCK7Fn/FtPTHczeyGo2HjHoe6MeJ09IaX6RxFi6a3uJuYCWOePCI1059fbw1VpMp4nhSNm6DCiY=@vger.kernel.org X-Gm-Message-State: AOJu0Yz3XXh/Kysip/wUkhIZy3u25oeyLwCWVu+cxJI04gU6RRF/ownt 2BhUR9Wi93zNiDw33Mgm/yWuKr+G2G5cpDW48yiKlfHbga5MVDyT2rrz X-Gm-Gg: AfdE7ckUvcXefHfk//sD+XAnguets+W0tuwZ0ScJh/+EMsUplU4jtzJBUJOuOdgdgrU iHMHtRp5oAzqZI+u70ua66IA1AR4sLcW8pvhtfLjiJ1BVMEX3sP+i5rdwso0TG86lwgVrmHx/zl +sqtQ4gdXVOTYeFBrtd34A/EXqR26dCNJ9nKT+4kMMqdS0ogSTWMpRrQudD+mi12dAiBx9AcXeM AF1oWupXHy9QSz0u+NaQ1nh+oMxbW7BzsdAFLmxCzqbUfnh6mXkTqoKPeIXg7BGzh6U1Ni17KJ0 gmj8qsekmLLDpwT8Ecx3J0LO8d+D38xWZ//PwVFS4VlWCjgydXpyJ6IKq/cuhLqTU4ELVeAQlO0 5MV0UCxk+bMXNgNKAcr7txuHVRzdInGV68OLeDIHmuwTKLaq0nejpNEQJeYNccynFL+kOMni1j0 XPOsbe510SQkI3xlRnWhZ0GzmYZPxrvj+CNz/p0q49TiX5lPKr4h90LbMs/j2dVKAnGlM+XFwID QTeWZ2Bn48IUx4= X-Received: by 2002:a05:693c:3945:b0:304:e566:e000 with SMTP id 5a478bee46e88-30c850a8f7cmr5878370eec.31.1782451086712; Thu, 25 Jun 2026 22:18:06 -0700 (PDT) Received: from dtor-ws.sjc.corp.google.com ([2a00:79e0:2ebe:8:a474:bf4a:4966:8d97]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30c7c9e9214sm14804188eec.20.2026.06.25.22.18.05 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 25 Jun 2026 22:18:05 -0700 (PDT) From: Dmitry Torokhov To: Bryam Vargas , Hans Verkuil Cc: linux-input@vger.kernel.org, linux-kernel@vger.kernel.org, sashiko-bot@kernel.org, stable@vger.kernel.org Subject: [PATCH 01/10] Input: synaptics-rmi4 - fix F55 transmitter electrode count typo Date: Thu, 25 Jun 2026 22:17:50 -0700 Message-ID: <20260626051802.4033172-1-dmitry.torokhov@gmail.com> X-Mailer: git-send-email 2.55.0.rc0.799.gd6f94ed593-goog Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit During F55 sensor detection, the transmitter (TX) electrode count was incorrectly assigned the value of the receiver (RX) electrode count due to copy-paste typos. This incorrect value was then propagated to the driver data and used by F54 to determine the diagnostics report size. On devices with more RX than TX electrodes, this inflated the perceived TX count, leading to incorrect report size calculations and potential out-of-bounds buffer accesses. Fix the typos by correctly assigning the TX electrode counts. Fixes: 6adba43fd222 ("Input: synaptics-rmi4 - add support for F55 sensor tuning") Fixes: c762cc68b6a1 ("Input: synaptics-rmi4 - propagate correct number of rx and tx electrodes to F54") Reported-by: sashiko-bot@kernel.org Cc: stable@vger.kernel.org Assisted-by: Antigravity:gemini-3.5-flash Signed-off-by: Dmitry Torokhov --- drivers/input/rmi4/rmi_f55.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/input/rmi4/rmi_f55.c b/drivers/input/rmi4/rmi_f55.c index 488adaca4dd0..a0877d32a914 100644 --- a/drivers/input/rmi4/rmi_f55.c +++ b/drivers/input/rmi4/rmi_f55.c @@ -54,10 +54,10 @@ static int rmi_f55_detect(struct rmi_function *fn) f55->num_tx_electrodes = f55->qry[F55_NUM_TX_OFFSET]; f55->cfg_num_rx_electrodes = f55->num_rx_electrodes; - f55->cfg_num_tx_electrodes = f55->num_rx_electrodes; + f55->cfg_num_tx_electrodes = f55->num_tx_electrodes; drv_data->num_rx_electrodes = f55->cfg_num_rx_electrodes; - drv_data->num_tx_electrodes = f55->cfg_num_rx_electrodes; + drv_data->num_tx_electrodes = f55->cfg_num_tx_electrodes; if (f55->qry[F55_PHYS_CHAR_OFFSET] & F55_CAP_SENSOR_ASSIGN) { int i, total; -- 2.55.0.rc0.799.gd6f94ed593-goog