mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-24 17:59:32 +00:00
fbdev fix for v4.16-rc5:
- fix kernel data leak in FBIOGETCMAP_SPARC ioctl (Peter Malone) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABCAAGBQJaorOYAAoJEH4ztj+gR8ILAMcP/3OuHo2Oh9czd5LjhdpiHDA/ liXIAWs8ujMGE0BNNXIeLJ8VCpXDRAqWdsEDzamIjrag8Um7oBCp/TLlHwwJl7nK P6vDn3QHdz7eWYSC7hs6bphlPlYVI9a8VpZOMxvj5w25oZfWADaaVDdmjofwXG4j 6AjNb0F8Ls+SaprZABj7l9h7/zeX5AvtraTZz6hSwvxsoxR12YnpaeRzaFdaidux HV28RgHU1Yn6nTSSSu5oQVnWsknMxftowrd8ZMwqG3O7Ukn50nsSPEMeZmY/XoDb EZtPPodGzBKZYnZ/ZHYdh0MDFh8/n/tIbDzFeoqli2bTjhIzx3aELnvYrJF1RPlp YTGtYK+IHTZQZv8BxyHmrnSIfPi7rVqTPijybe4t9Feyq+TNfb0uBk12t//duO3W 23hj4jAVIyWBOibstzKov8PaPusq3xlvJ0Pc0bsaEEzY6+ED5crhMGWONMkA7ekV Jq37G5N4egDK4dBI5nvnNVvejZ5fp9KjEDU7gowYEpjMIUS9n09xK1+pXa3mfsiX 6LaDNEzDDOkt745c+j7NfLE+aFUH/SqHiEdOHbmd9/HSHYNcflBmBMMsgYbJ6mX0 oeoKcD/8aYkTxEdqRNMqGSC+6uf2/7+KuPXV66Sf9DkGInpqAWDUxDAs8XrcczXl 1Y8RaGn6cdi72nkZStQb =ukkh -----END PGP SIGNATURE----- Merge tag 'fbdev-v4.16-rc5' of git://github.com/bzolnier/linux Pull fbdev fix from Bartlomiej Zolnierkiewicz: "Just a single fix to close a kernel data leak in FBIOGETCMAP_SPARC ioctl" * tag 'fbdev-v4.16-rc5' of git://github.com/bzolnier/linux: fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper().
This commit is contained in:
commit
99d7d64b60
1 changed files with 2 additions and 2 deletions
|
@ -122,7 +122,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg,
|
|||
unsigned char __user *ured;
|
||||
unsigned char __user *ugreen;
|
||||
unsigned char __user *ublue;
|
||||
int index, count, i;
|
||||
unsigned int index, count, i;
|
||||
|
||||
if (get_user(index, &c->index) ||
|
||||
__get_user(count, &c->count) ||
|
||||
|
@ -161,7 +161,7 @@ int sbusfb_ioctl_helper(unsigned long cmd, unsigned long arg,
|
|||
unsigned char __user *ugreen;
|
||||
unsigned char __user *ublue;
|
||||
struct fb_cmap *cmap = &info->cmap;
|
||||
int index, count, i;
|
||||
unsigned int index, count, i;
|
||||
u8 red, green, blue;
|
||||
|
||||
if (get_user(index, &c->index) ||
|
||||
|
|
Loading…
Reference in a new issue