linux-stable/drivers/video
Hyunwoo Kim ab5140c6dd video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
[ Upstream commit a09d2d00af ]

In pxa3xx_gcu_write, a count parameter of type size_t is passed to words of
type int.  Then, copy_from_user() may cause a heap overflow because it is used
as the third argument of copy_from_user().

Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-09-23 14:15:51 +02:00
..
backlight backlight: qcom-wled: Respect enabled-strings in set_brightness 2022-01-27 11:03:46 +01:00
console parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI 2022-06-29 09:03:29 +02:00
fbdev video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write 2022-09-23 14:15:51 +02:00
logo
display_timing.c
hdmi.c
Kconfig
Makefile
of_display_timing.c
of_videomode.c
vgastate.c
videomode.c