Hyunwoo Kim ab5140c6dd video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write ...

[ Upstream commit a09d2d00af ]

In pxa3xx_gcu_write, a count parameter of type size_t is passed to words of
type int.  Then, copy_from_user() may cause a heap overflow because it is used
as the third argument of copy_from_user().

Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-09-23 14:15:51 +02:00

..

backlight

…

console

parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI

2022-06-29 09:03:29 +02:00

fbdev

video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write

2022-09-23 14:15:51 +02:00

logo

…

display_timing.c

…

hdmi.c

…

Kconfig

…

Makefile

…

of_display_timing.c

…

of_videomode.c

…

vgastate.c

…

videomode.c

…