xf86-input-synaptics:master: 1 commit(s)

[Peter Hutterer]

Reporting from xf86-input-synaptics: xf86-input-synaptics driver

Please visit:
    http://cgit.freedesktop.org/xorg/driver/xf86-input-synaptics
Or get your own copy by using:
    git-clone git://anongit.freedesktop.org/xorg/driver/xf86-input-synaptics

Commit against master at ac47b4ea...:
commit 7cc0ebf0858ebb505d933839f25bb269a8cdb764
Author: Peter Hutterer <peter.hutterer at who-t.net>
Date:   Fri Apr 26 10:09:10 2013 +1000

    Fix stack smash in clickpad_guess_clickfingers()
    
    Apple Magic Trackpad can report 16 slots. In clickpad_guess_clickfingers()
    the array allocated on the stack contains only 10 slots.
    As (.num_mt_mask == .num_slots), the function writes out of the bounds
    of close_point.
    
    Use a size 32 bitmask instead and warn if we ever get past 32 touchpoints.
    
    This fixes:
    https://bugzilla.redhat.com/show_bug.cgi?id=952221
    
    Signed-off-by: Peter Hutterer <peter.hutterer at who-t.net>
    Reported-by: Benjamin Tissoires <benjamin.tissoires at redhat.com>

diffstat:
    src/synaptics.c |   15 +++++++++------
    1 file changed, 9 insertions(+), 6 deletions(-)

cgit url:
http://cgit.freedesktop.org/xorg/driver/xf86-input-synaptics/commit/?id=7cc0ebf0