TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.9.276
twx-linux/drivers/video/fbdev
T
History
Anirudh Rayabharam cb0c5c0cf2 video: hgafb: correctly handle card detect failure during probe 
commit 02625c9652 upstream.

The return value of hga_card_detect() is not properly handled causing
the probe to succeed even though hga_card_detect() failed. Since probe
succeeds, hgafb_open() can be called which will end up operating on an
unmapped hga_vram. This results in an out-of-bounds access as reported
by kernel test robot [1].

To fix this, correctly detect failure of hga_card_detect() by checking
for a non-zero error code.

[1]: https://lore.kernel.org/lkml/20210516150019.GB25903@xsang-OptiPlex-9020/

Fixes: dc13cac486 ("video: hgafb: fix potential NULL pointer dereference")
Cc: stable <stable@vger.kernel.org>
Reported-by: kernel test robot <oliver.sang@intel.com>
Reviewed-by: Igor Matheus Andrade Torrente <igormtorrente@gmail.com>
Signed-off-by: Anirudh Rayabharam <mail@anirudhrb.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20210516192714.25823-1-mail@anirudhrb.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-26 11:29:09 +02:00
..
aty
…
core
fbdev: zero-fill colormap in fbcmap.c
2021-05-22 10:40:16 +02:00
geode
…
i810
…
intelfb
…
kyro
…
matrox
…
mb862xx
…
mbx
…
mmp
…
nvidia
…
omap
…
omap2
omapfb: fix multiple reference count leaks due to pm_runtime_get_sync
2020-09-03 11:21:17 +02:00
riva
…
savage
…
sis
video: fbdev: sis: fix null ptr dereference
2020-10-29 09:05:35 +01:00
vermilion
…
via
…
68328fb.c
…
acornfb.c
…
acornfb.h
…
amba-clcd-nomadik.c
…
amba-clcd-nomadik.h
…
amba-clcd-versatile.c
…
amba-clcd-versatile.h
…
amba-clcd.c
…
amifb.c
…
arcfb.c
…
arkfb.c
…
asiliantfb.c
…
atafb_iplan2p2.c
…
atafb_iplan2p4.c
…
atafb_iplan2p8.c
…
atafb_mfb.c
…
atafb_utils.h
…
atafb.c
…
atafb.h
…
atmel_lcdfb.c
…
au1100fb.c
…
au1100fb.h
…
au1200fb.c
…
au1200fb.h
…
auo_k190x.c
…
auo_k190x.h
…
auo_k1900fb.c
…
auo_k1901fb.c
…
bf54x-lq043fb.c
…
bf537-lq035.c
…
bfin_adv7393fb.c
…
bfin_adv7393fb.h
…
bfin-lq035q1-fb.c
…
bfin-t350mcqb-fb.c
…
broadsheetfb.c
…
bt431.h
…
bt455.h
…
bw2.c
…
c2p_core.h
…
c2p_iplan2.c
…
c2p_planar.c
…
c2p.h
…
carminefb_regs.h
…
carminefb.c
…
carminefb.h
…
cg3.c
…
cg6.c
…
cg14.c
…
chipsfb.c
fbdev: chipsfb: remove set but not used variable 'size'
2020-01-29 10:24:15 +01:00
cirrusfb.c
…
clps711x-fb.c
…
clps711xfb.c
…
cobalt_lcdfb.c
…
controlfb.c
…
controlfb.h
…
cyber2000fb.c
…
cyber2000fb.h
…
da8xx-fb.c
…
dnfb.c
…
edid.h
…
efifb.c
…
ep93xx-fb.c
…
fb-puv3.c
…
ffb.c
…
fm2fb.c
…
fsl-diu-fb.c
…
g364fb.c
…
gbefb.c
…
goldfishfb.c
video: fbdev: Set pixclock = 0 in goldfishfb
2019-04-03 06:24:14 +02:00
grvga.c
…
gxt4500.c
…
hecubafb.c
…
hgafb.c
video: hgafb: correctly handle card detect failure during probe
2021-05-26 11:29:09 +02:00
hitfb.c
…
hpfb.c
…
hyperv_fb.c
video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
2021-01-12 19:49:03 +01:00
i740_reg.h
…
i740fb.c
…
igafb.c
…
imsttfb.c
Revert "video: imsttfb: fix potential NULL pointer dereferences"
2021-05-26 11:29:07 +02:00
imxfb.c
…
jz4740_fb.c
…
Kconfig
fbdev: aty: SPARC64 requires FB_ATY_CT
2021-03-03 17:44:34 +01:00
leo.c
…
macfb.c
…
macmodes.c
…
macmodes.h
…
Makefile
…
maxinefb.c
…
metronomefb.c
…
mx3fb.c
…
mxsfb.c
…
n411.c
…
neofb.c
video: fbdev: neofb: fix memory leak in neo_scan_monitor()
2020-08-21 11:01:58 +02:00
nuc900fb.c
…
nuc900fb.h
…
ocfb.c
…
offb.c
…
p9100.c
…
platinumfb.c
…
platinumfb.h
…
pm2fb.c
…
pm3fb.c
…
pmag-aa-fb.c
…
pmag-ba-fb.c
…
pmagb-b-fb.c
…
ps3fb.c
…
pvr2fb.c
video: fbdev: pvr2fb: initialize variables
2020-11-10 10:23:53 +01:00
pxa3xx-gcu.c
…
pxa3xx-gcu.h
…
pxa168fb.c
pxa168fb: Fix the function used to release some memory in an error handling path
2020-02-28 15:42:17 +01:00
pxa168fb.h
…
pxafb.c
video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
2020-08-21 11:02:00 +02:00
pxafb.h
…
q40fb.c
…
s1d13xxxfb.c
…
s3c2410fb.c
…
s3c2410fb.h
…
s3c-fb.c
…
s3fb.c
…
sa1100fb.c
…
sa1100fb.h
…
sbuslib.c
fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper()
2019-11-25 09:53:41 +01:00
sbuslib.h
…
sh7760fb.c
…
sh_mobile_lcdcfb.c
…
sh_mobile_lcdcfb.h
…
sh_mobile_meram.c
…
simplefb.c
…
skeletonfb.c
…
sm501fb.c
…
sm712.h
fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
2019-05-25 18:26:52 +02:00
sm712fb.c
video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
2020-08-21 11:01:59 +02:00
smscufx.c
…
ssd1307fb.c
video: ssd1307fb: Start page range at page_offset
2019-10-07 18:53:09 +02:00
sstfb.c
…
sticore.h
…
stifb.c
…
sunxvr500.c
…
sunxvr1000.c
…
sunxvr2500.c
…
tcx.c
…
tdfxfb.c
…
tgafb.c
…
tmiofb.c
…
tridentfb.c
…
udlfb.c
…
uvesafb.c
…
valkyriefb.c
…
valkyriefb.h
…
vesafb.c
…
vfb.c
…
vga16fb.c
video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
2020-10-29 09:05:35 +01:00
vt8500lcdfb.c
…
vt8500lcdfb.h
…
vt8623fb.c
…
w100fb.c
video: fbdev: w100fb: Fix a potential double free.
2020-06-20 10:24:11 +02:00
w100fb.h
…
wm8505fb_regs.h
…
wm8505fb.c
…
wmt_ge_rops.c
…
wmt_ge_rops.h
…
xen-fbfront.c
…
xilinxfb.c
…