Re: [PATCH v2] HID: ft260: validate report size and payload length in raw_event
From: Jiri Kosina
Date: Thu Apr 09 2026 - 14:29:39 EST
On Thu, 9 Apr 2026, Michael Zaidman wrote:
> The FT260 uses different report IDs (0xD0 through 0xDE) for different payload
> lengths, with each report ID defining a different report size in the HID
> descriptor. So yes, the device can legitimately send reports shorter than
> FT260_REPORT_MAX_LENGTH, and a blanket size < 64 check would break valid
> short transfers.
Perfect, thanks a lot for the detailed writeup! I was rather suspicious
about the bold statement in the changelog.
Similarly to other Sebastián's fixes to various other drivers. This will
need more thorough check.
Thanks,
--
Jiri Kosina
SUSE Labs