TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
topic/ht/pfc400/next
twx-linux/drivers/video/fbdev
T
History
Sergey Shtylyov ab91647acd fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() 
[ Upstream commit 3f6dae09fc ]

In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000,
cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's
then passed to fb_cvt_hperiod(), where it's used as a divider -- division
by 0 will result in kernel oops. Add a sanity check for cvt.f_refresh to
avoid such overflow...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Fixes: 96fe6a2109 ("[PATCH] fbdev: Add VESA Coordinated Video Timings (CVT) support")
Signed-off-by: Sergey Shtylyov <s.shtylyov@omp.ru>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-19 15:28:25 +02:00
..
aty
fbdev: atyfb: only use ioremap_uc() on i386 and ia64
2023-09-23 20:50:29 +02:00
core
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
2025-06-19 15:28:25 +02:00
geode
fbdev/geode/lxfb: Use fbdev I/O helpers
2023-08-04 15:54:35 +02:00
i810
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
intelfb
fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:39 +02:00
kyro
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
matrox
fbdev: Remove FBINFO_FLAG_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:39 +02:00
mb862xx
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
mmp
fbdev: mmp: Annotate struct mmphw_ctrl with __counted_by
2023-09-23 20:35:14 +02:00
nvidia
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
omap
fbdev: omap: use threaded IRQ for LCD DMA
2025-02-21 13:57:09 +01:00
omap2
fbdev: omapfb: Add 'plane' value check
2025-04-25 10:45:20 +02:00
riva
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
savage
fbdev: savage: Handle err return when savagefb_check_var failed
2024-06-16 13:47:37 +02:00
sis
fbdev: sisfb: Fix strbuf array overflow
2024-10-17 15:24:22 +02:00
vermilion
fbdev: Remove FBINFO_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:38 +02:00
via
fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
2024-04-13 13:07:39 +02:00
68328fb.c
fbdev: Remove FBINFO_DEFAULT from static structs
2023-07-24 16:50:38 +02:00
acornfb.c
fbdev/acornfb: Fix name of fb_ops initializer macro
2024-01-25 15:35:45 -08:00
acornfb.h
…
amba-clcd.c
fbdev: Remove FBINFO_FLAG_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:39 +02:00
amifb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
arcfb.c
fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:39 +02:00
arkfb.c
…
asiliantfb.c
fbdev/asiliantfb: Use fbdev I/O helpers
2023-08-04 15:54:34 +02:00
atafb_iplan2p2.c
…
atafb_iplan2p4.c
…
atafb_iplan2p8.c
…
atafb_mfb.c
…
atafb_utils.h
…
atafb.c
fbdev/atafb: Remove flag FBINFO_FLAG_DEFAULT
2023-07-24 16:50:39 +02:00
atafb.h
…
atmel_lcdfb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
au1100fb.c
fbdev: au1100fb: Move a variable assignment behind a null pointer check
2025-04-10 14:37:29 +02:00
au1100fb.h
…
au1200fb.c
fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
2023-07-20 07:52:54 +02:00
au1200fb.h
…
broadsheetfb.c
fbdev: Align deferred I/O with naming of helpers
2023-07-31 20:07:24 +02:00
bt431.h
…
bt455.h
…
bw2.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
c2p_core.h
…
c2p_iplan2.c
…
c2p_planar.c
…
c2p.h
…
carminefb_regs.h
…
carminefb.c
fbdev/carminefb: Use fbdev I/O helpers
2023-08-04 15:54:35 +02:00
carminefb.h
…
cg3.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
cg6.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
cg14.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
chipsfb.c
fbdev/chipsfb: Use fbdev I/O helpers
2023-08-04 15:54:35 +02:00
cirrusfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
clps711x-fb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
cobalt_lcdfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
controlfb.c
fbdev: Remove FBINFO_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:38 +02:00
controlfb.h
…
cyber2000fb.c
fbdev: Remove FBINFO_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:38 +02:00
cyber2000fb.h
…
da8xx-fb.c
fbdev/da8xx-fb: Use fbdev I/O helpers
2023-08-04 15:54:35 +02:00
dnfb.c
…
edid.h
…
efifb.c
fbdev: efifb: Register sysfs groups through driver core
2024-10-10 11:57:31 +02:00
ep93xx-fb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
ffb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
fm2fb.c
fbdev/fm2fb: Use fbdev I/O helpers
2023-08-04 15:54:35 +02:00
fsl-diu-fb.c
fbdev: fsl-diu-fb: add missing device_remove_file()
2025-06-04 14:41:55 +02:00
g364fb.c
fbdev/g364fb: fix build failure with mips
2023-09-02 08:18:40 -07:00
gbefb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
goldfishfb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
grvga.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
gxt4500.c
fbdev/gxt4500: Use fbdev I/O helpers
2023-08-04 15:54:36 +02:00
hecubafb.c
fbdev: Align deferred I/O with naming of helpers
2023-07-31 20:07:24 +02:00
hgafb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
hitfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
hpfb.c
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
2024-10-04 16:29:06 +02:00
hyperv_fb.c
fbdev: hyperv_fb: iounmap() the correct memory when removing a device
2025-03-22 12:50:37 -07:00
i740_reg.h
…
i740fb.c
fbdev/i740fb: Use fbdev I/O helpers
2023-08-04 15:54:36 +02:00
imsttfb.c
fbdev: imsttfb: fix a resource leak in probe
2023-11-20 11:59:38 +01:00
imxfb.c
fbdev: imxfb: fix left margin setting
2024-01-25 15:35:40 -08:00
Kconfig
fbdev: sh7760fb: allow modular build
2024-06-12 11:12:02 +02:00
leo.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
macfb.c
fbdev/macfb: Use fbdev I/O helpers
2023-08-04 15:54:36 +02:00
macmodes.c
…
macmodes.h
…
Makefile
fbdev: mx3fb: Remove the driver
2023-08-31 22:58:25 +02:00
maxinefb.c
fbdev/maxinefb: Use fbdev I/O helpers
2023-08-04 15:54:36 +02:00
metronomefb.c
fbdev: Align deferred I/O with naming of helpers
2023-07-31 20:07:24 +02:00
n411.c
…
neofb.c
fbdev: neofb: Shorten Neomagic product name in info struct
2023-09-01 00:29:33 +02:00
ocfb.c
fbdev/ocfb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
offb.c
fbdev/offb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
p9100.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
platinumfb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
platinumfb.h
…
pm2fb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
pm3fb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
pmag-aa-fb.c
fbdev/pmag-aa-fb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
pmag-ba-fb.c
fbdev/pmag-ba-fb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
pmagb-b-fb.c
fbdev/pmagb-b-fb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
ps3fb.c
fbdev/ps3fb: Build without kernel device
2023-08-03 16:08:14 +02:00
pvr2fb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
pxa3xx-gcu.c
fbdev: pxa3xx-gcu: Convert to platform remove callback returning void
2023-04-24 11:48:31 +02:00
pxa3xx-gcu.h
…
pxa3xx-regs.h
…
pxa168fb.c
fbdev/pxa168fb: Use fbdev I/O helpers
2023-08-04 15:54:37 +02:00
pxa168fb.h
…
pxafb.c
fbdev: pxafb: Fix possible use after free in pxafb_task()
2024-10-10 11:57:31 +02:00
pxafb.h
…
q40fb.c
fbdev/q40fb: Use fbdev I/O helpers
2023-08-04 15:54:38 +02:00
s1d13xxxfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
s3c-fb.c
fbdev/s3cfb: Use fbdev I/O helpers
2023-08-04 15:54:38 +02:00
s3fb.c
…
sa1100fb.c
fbdev: sa1100fb: mark sa1100fb_init() static
2023-10-16 23:04:27 +02:00
sa1100fb.h
…
sbuslib.c
fbdev: Explicitly include correct DT includes
2023-07-20 07:56:30 +02:00
sbuslib.h
…
sh7760fb.c
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
2024-12-09 10:32:21 +01:00
sh_mobile_lcdcfb.c
fbdev: shmobile: fix snprintf truncation
2024-06-12 11:11:58 +02:00
sh_mobile_lcdcfb.h
…
simplefb.c
fbdev/simplefb: Use fbdev I/O helpers
2023-08-04 15:54:38 +02:00
skeletonfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
sm501fb.c
fbdev: sm501fb: Add some geometry checks.
2025-04-10 14:37:29 +02:00
sm712.h
…
sm712fb.c
fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:39 +02:00
smscufx.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
ssd1307fb.c
pwm: Rename pwm_apply_state() to pwm_apply_might_sleep()
2024-06-12 11:12:24 +02:00
sstfb.c
fbdev/sstfb: Use fbdev I/O helpers
2023-08-04 15:54:38 +02:00
stifb.c
sticon/parisc: Fix STI console on 64-bit only machines
2023-06-30 17:14:14 +02:00
sunxvr500.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
sunxvr1000.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
sunxvr2500.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
tcx.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00
tdfxfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
tgafb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
tridentfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
udlfb.c
fbdev: Remove FBINFO_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:38 +02:00
uvesafb.c
fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
2023-10-16 23:19:34 +02:00
valkyriefb.c
fbdev/valkyriefb: Use fbdev I/O helpers
2023-08-04 15:54:38 +02:00
valkyriefb.h
…
vesafb.c
fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
2024-08-11 12:47:16 +02:00
vfb.c
fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:39 +02:00
vga16fb.c
fbdev: Remove FBINFO_FLAG_DEFAULT from framebuffer_alloc()'ed structs
2023-07-24 16:50:39 +02:00
vt8500lcdfb.c
fbdev: Remove FBINFO_DEFAULT from kzalloc()'ed structs
2023-07-24 16:50:38 +02:00
vt8500lcdfb.h
…
vt8623fb.c
…
wm8505fb_regs.h
…
wm8505fb.c
fbdev: Remove FBINFO_DEFAULT from devm_kzalloc()'ed structs
2023-07-24 16:50:38 +02:00
wmt_ge_rops.c
fbdev: Include <linux/io.h> in various drivers
2023-05-18 11:06:19 +02:00
wmt_ge_rops.h
…
xen-fbfront.c
fbdev: Align deferred I/O with naming of helpers
2023-07-31 20:07:24 +02:00
xilinxfb.c
BackMerge tag 'v6.5-rc7' into drm-next
2023-08-24 07:26:06 +10:00