TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.14.65
twx-linux/drivers/video/fbdev
T
History
Kees Cook 9aa818d42b video: uvesafb: Fix integer overflow in allocation 
commit 9f645bcc56 upstream.

cmap->len can get close to INT_MAX/2, allowing for an integer overflow in
allocation. This uses kmalloc_array() instead to catch the condition.

Reported-by: Dr Silvio Cesare of InfoSect <silvio.cesare@gmail.com>
Fixes: 8bdb3a2d7d ("uvesafb: the driver core")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-07-03 11:25:02 +02:00
..
aty
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
core
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
geode
x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
2018-02-22 15:42:24 +01:00
i810
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
intelfb
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
kyro
…
matrox
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mb862xx
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mbx
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mmp
video: fbdev/mmp: add MODULE_LICENSE
2018-02-25 11:07:51 +01:00
nvidia
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
omap
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
omap2
omapdrm: panel: fix compatible vendor string for td028ttec1
2018-03-24 11:01:25 +01:00
riva
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
savage
…
sis
video: fbdev: sis: fix duplicated code for different branches
2017-09-04 16:00:50 +02:00
vermilion
video: fbdev: make fb_videomode const
2017-09-04 16:00:49 +02:00
via
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
68328fb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
acornfb.c
…
acornfb.h
…
amba-clcd-nomadik.c
…
amba-clcd-nomadik.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amba-clcd-versatile.c
…
amba-clcd-versatile.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amba-clcd.c
video: ARM CLCD: constify amba_id
2017-09-04 16:00:49 +02:00
amifb.c
…
arcfb.c
…
arkfb.c
…
asiliantfb.c
…
atafb_iplan2p2.c
…
atafb_iplan2p4.c
…
atafb_iplan2p8.c
…
atafb_mfb.c
…
atafb_utils.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atafb.c
…
atafb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atmel_lcdfb.c
video: fbdev: atmel_lcdfb: fix display-timings lookup
2018-02-22 15:42:27 +01:00
au1100fb.c
…
au1100fb.h
…
au1200fb.c
video: fbdev: au1200fb: Return an error code if a memory allocation fails
2017-12-20 10:10:23 +01:00
au1200fb.h
…
auo_k190x.c
…
auo_k190x.h
…
auo_k1900fb.c
…
auo_k1901fb.c
…
bf54x-lq043fb.c
…
bf537-lq035.c
…
bfin_adv7393fb.c
…
bfin_adv7393fb.h
…
bfin-lq035q1-fb.c
…
bfin-t350mcqb-fb.c
…
broadsheetfb.c
…
bt431.h
…
bt455.h
…
bw2.c
…
c2p_core.h
…
c2p_iplan2.c
…
c2p_planar.c
…
c2p.h
…
carminefb_regs.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
carminefb.c
…
carminefb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
cg3.c
…
cg6.c
…
cg14.c
…
chipsfb.c
…
cirrusfb.c
…
clps711x-fb.c
…
clps711xfb.c
…
cobalt_lcdfb.c
…
controlfb.c
…
controlfb.h
fbdev: controlfb: Add missing modes to fix out of bounds access
2017-12-20 10:10:23 +01:00
cyber2000fb.c
video: fbdev: make fb_videomode const
2017-09-04 16:00:49 +02:00
cyber2000fb.h
…
da8xx-fb.c
…
dnfb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
edid.h
…
efifb.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ep93xx-fb.c
…
fb-puv3.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
ffb.c
…
fm2fb.c
video: fm2fb: constify zorro_device_id
2017-09-04 16:00:49 +02:00
fsl-diu-fb.c
…
g364fb.c
…
gbefb.c
…
goldfishfb.c
…
grvga.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
gxt4500.c
…
hecubafb.c
…
hgafb.c
…
hitfb.c
…
hpfb.c
…
hyperv_fb.c
…
i740_reg.h
…
i740fb.c
…
igafb.c
…
imsttfb.c
…
imxfb.c
…
jz4740_fb.c
…
Kconfig
video: fbdev: Enable Xilinx FB for ZynqMP
2017-08-21 16:49:57 +02:00
leo.c
…
macfb.c
…
macmodes.c
…
macmodes.h
…
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
maxinefb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
metronomefb.c
…
mx3fb.c
…
mxsfb.c
…
n411.c
…
neofb.c
…
nuc900fb.c
…
nuc900fb.h
…
ocfb.c
…
offb.c
…
p9100.c
…
platinumfb.c
…
platinumfb.h
…
pm2fb.c
…
pm3fb.c
…
pmag-aa-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
pmag-ba-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
pmagb-b-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
ps3fb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
pvr2fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
pxa3xx-gcu.c
video: fbdev: pxa3xx_gcu: fix error return code in pxa3xx_gcu_probe()
2017-08-21 16:49:58 +02:00
pxa3xx-gcu.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pxa168fb.c
…
pxa168fb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pxafb.c
…
pxafb.h
…
q40fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
s1d13xxxfb.c
…
s3c2410fb.c
…
s3c2410fb.h
…
s3c-fb.c
…
s3fb.c
…
sa1100fb.c
…
sa1100fb.h
…
sbuslib.c
fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper().
2018-05-30 07:52:12 +02:00
sbuslib.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sh7760fb.c
…
sh_mobile_lcdcfb.c
…
sh_mobile_lcdcfb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sh_mobile_meram.c
…
simplefb.c
…
skeletonfb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
sm501fb.c
video: fbdev: make fb_videomode const
2017-09-04 16:00:49 +02:00
sm712.h
…
sm712fb.c
…
smscufx.c
video: fbdev: smscufx: constify usb_device_id.
2017-08-21 16:49:57 +02:00
ssd1307fb.c
…
sstfb.c
…
sticore.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
stifb.c
…
sunxvr500.c
…
sunxvr1000.c
…
sunxvr2500.c
…
tcx.c
…
tdfxfb.c
…
tgafb.c
…
tmiofb.c
…
tridentfb.c
…
udlfb.c
video: udlfb: Fix read EDID timeout
2017-12-20 10:10:23 +01:00
uvesafb.c
video: uvesafb: Fix integer overflow in allocation
2018-07-03 11:25:02 +02:00
valkyriefb.c
…
valkyriefb.h
…
vesafb.c
…
vfb.c
vfb: fix video mode and line_length being set when loaded
2018-04-12 12:32:15 +02:00
vga16fb.c
…
vt8500lcdfb.c
…
vt8500lcdfb.h
…
vt8623fb.c
video: fbdev: vt8623fb: constify vt8623_timing_regs
2017-08-18 19:56:40 +02:00
w100fb.c
…
w100fb.h
…
wm8505fb_regs.h
…
wm8505fb.c
…
wmt_ge_rops.c
…
wmt_ge_rops.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xen-fbfront.c
…
xilinxfb.c
video: fbdev: Fix multiple style issues in xilinxfb
2017-08-21 16:49:57 +02:00