Re: [PATCH] Input: iqs5xx: validate firmware record destination span

[Dmitry Torokhov]

On Wed, Jul 15, 2026 at 04:38:50PM +0800, Pengpeng Hou wrote:
> The firmware record parser checks that the record address starts within
> the programmable map, but does not check that the complete record data
> fits in that map. A record near the end of the map can therefore make
> the copy to pmap exceed its destination span.
> 
> Check the record length against the remaining programmable map range
> before copying the record data.
> 
> Fixes: 7b5bb55d0dad ("Input: add support for Azoteq IQS550/572/525")
> Signed-off-by: Pengpeng Hou <pengpeng@xxxxxxxxxxx>

Applied, thank you.

-- 
Dmitry