mirror-linux/drivers/video
Zhang Shurong cae8542495 fbdev: fix potential OOB read in fast_imageblit()
commit c2d22806ae upstream.

There is a potential OOB read at fast_imageblit, for
"colortab[(*src >> 4)]" can become a negative value due to
"const char *s = image->data, *src".
This change makes sure the index for colortab always positive
or zero.

Similar commit:
https://patchwork.kernel.org/patch/11746067

Potential bug report:
https://groups.google.com/g/syzkaller-bugs/c/9ubBXKeKXf4/m/k-QXy4UgAAAJ

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Cc: stable@vger.kernel.org
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-07-01 13:16:25 +02:00
..
backlight - New Drivers 2022-10-05 10:45:15 -07:00
console fbdev: Move fbdev drivers from strlcpy to strscpy 2022-08-24 22:06:15 +02:00
fbdev fbdev: fix potential OOB read in fast_imageblit() 2023-07-01 13:16:25 +02:00
logo
Kconfig
Makefile
aperture.c fbdev/core: Avoid uninitialized read in aperture_remove_conflicting_pci_device() 2022-10-27 09:20:05 +02:00
display_timing.c
hdmi.c video/hdmi: Add audio_infoframe packing for DP 2022-09-04 15:31:59 +03:00
of_display_timing.c
of_videomode.c
vgastate.c
videomode.c