linux-stable/drivers/video
Zhang Shurong e32b0ad436 fbdev: fix potential OOB read in fast_imageblit()
[ Upstream commit c2d22806ae ]

There is a potential OOB read at fast_imageblit, for
"colortab[(*src >> 4)]" can become a negative value due to
"const char *s = image->data, *src".
This change makes sure the index for colortab always positive
or zero.

Similar commit:
https://patchwork.kernel.org/patch/11746067

Potential bug report:
https://groups.google.com/g/syzkaller-bugs/c/9ubBXKeKXf4/m/k-QXy4UgAAAJ

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Cc: stable@vger.kernel.org
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-08-30 16:31:52 +02:00
..
backlight video: backlight: Drop maximum brightness override for brightness zero 2021-11-26 11:36:18 +01:00
console vgacon: Propagate console boot parameters before calling `vc_resize' 2021-12-08 08:50:14 +01:00
fbdev fbdev: fix potential OOB read in fast_imageblit() 2023-08-30 16:31:52 +02:00
logo
Kconfig
Makefile
display_timing.c
hdmi.c video/hdmi: Fix AVI bar unpack 2019-12-17 20:35:17 +01:00
of_display_timing.c
of_videomode.c
vgastate.c
videomode.c