Received: by 2002:a05:6a10:1287:0:0:0:0 with SMTP id d7csp3456726pxv; Mon, 26 Jul 2021 04:44:49 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzQJV6F68CKbmvg4seMbDUQjfL4GHx+E/1J44yB/J+hZ7UximlwlV74xvCHCJXvp9E4EhPC X-Received: by 2002:a17:906:2a8e:: with SMTP id l14mr16523186eje.321.1627299889039; Mon, 26 Jul 2021 04:44:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1627299889; cv=none; d=google.com; s=arc-20160816; b=PaSFYjgmXeMX1et4PrDjSdnWvY1FrFTcXpLW8EfIFSmo5u5q4ImBB+DqmWUmwi1IsT 2eo5MwBohCU4nyxMUp0gx1PZLHp1PPYRJKSuDr9psO0fECrge5Ybb5ol4L2ZP29qw4mt OUJ1rJs2Hs/1sY+XvbjNl7TqgEdVOtWYfHCUnpoyW5RzVgahZxGY8LXnwc9wPhGJS5Rc vW14sADyyjylDg11If6z2JJG6+d2UqwNH1zpM1TxPSL5TxLm4m4nsSSIGXmpVng0iVhm sjWz1ZCKN9pNONqL0Sn+Xa33VDFGLw+6LfkB+tbQkpqDtU3zzKvaED5PdUaQA3cJ0NHk QVYg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:mime-version:content-transfer-encoding :content-id:content-language:accept-language:message-id:date :thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=evDPUslxUaLukH5pVeeVe4ET0nWliHTCs40Ts/OkTRs=; b=Imf0qMIm0H7Lv6nOVt3C1KN4tzA9Cgkmw5SbK1scREdLxLiGg0SwIA6VAWTaARZeKF y2ZoUDl6tBMP0kfJYEVhxE9owUl1Q5XLTn6QlaNs17xSGVNS9W5W3r08i7V12Id3UtFs IzWClvQEtPNTxJO+bass+dcMoccZHdu6P4qM/XThggYtoDpd5gT8SkLcsw3bJEIbxl4R GKXrFne9VL7Nh/ha05gC/thrW10ht3iiYQS4eNrNzRCZQlcvXqRq27mkPSwdwRNG+osB jNYre0EtUBw9XhrtxybXY2VMgj6FuuD7XS6JSrpZvOgdaysidFn4mc1YqDJJlJkASoSu wwrQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@tencent.com header.s=s202002 header.b=jGzGwnIi; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=tencent.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id k5si10008687edv.339.2021.07.26.04.44.26; Mon, 26 Jul 2021 04:44:49 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@tencent.com header.s=s202002 header.b=jGzGwnIi; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=tencent.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233603AbhGZLBZ (ORCPT + 99 others); Mon, 26 Jul 2021 07:01:25 -0400 Received: from mail12.tencent.com ([61.241.47.121]:49195 "EHLO mail4.tencent.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S233534AbhGZLBX (ORCPT ); Mon, 26 Jul 2021 07:01:23 -0400 X-Greylist: delayed 552 seconds by postgrey-1.27 at vger.kernel.org; Mon, 26 Jul 2021 07:01:22 EDT Received: from EX-SZ021.tencent.com (unknown [10.28.6.73]) by mail4.tencent.com (Postfix) with ESMTP id 8A41E64112; Mon, 26 Jul 2021 19:32:37 +0800 (CST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tencent.com; s=s202002; t=1627299157; bh=evDPUslxUaLukH5pVeeVe4ET0nWliHTCs40Ts/OkTRs=; h=From:To:CC:Subject:Date; b=jGzGwnIiKN7HjDJ+AtlLPh5vXGE6W+42s2exAzhNRpBA6oVd1kvPgBNyLchZdBOSZ CYdS1uzgt6r8Sde4KZouTKIMmOTWXPru5KQ/B9se3BIodg7Ib+3cT5nF4fSbHXoZcQ +jfg4ay2BH9CS5wHhACTJiwbMdTUAGbfxi5oypgw= Received: from EX-SZ037.tencent.com (10.28.6.119) by EX-SZ021.tencent.com (10.28.6.73) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.4; Mon, 26 Jul 2021 19:32:37 +0800 Received: from EX-SZ030.tencent.com (10.28.6.105) by EX-SZ037.tencent.com (10.28.6.119) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.4; Mon, 26 Jul 2021 19:32:37 +0800 Received: from EX-SZ030.tencent.com ([fe80::cd97:7a16:11e6:d0c8]) by EX-SZ030.tencent.com ([fe80::cd97:7a16:11e6:d0c8%5]) with mapi id 15.01.2242.008; Mon, 26 Jul 2021 19:32:37 +0800 From: =?utf-8?B?dGNzX2tlcm5lbCjohb7orq/kupHlhoXmoLjlvIDlj5HogIUp?= To: "gregkh@linuxfoundation.org" , "daniel.vetter@ffwll.ch" , "yepeilin.cs@gmail.com" , "penguin-kernel@I-love.SAKURA.ne.jp" , "tzimmermann@suse.de" , "george.kennedy@oracle.com" , "ducheng2@gmail.com" , "sam@ravnborg.org" CC: "dri-devel@lists.freedesktop.org" , "linux-fbdev@vger.kernel.org" , "linux-kernel@vger.kernel.org" Subject: [PATCH] fbcon: Out-Of-Bounds write in sys_imageblit, add range check Thread-Topic: [PATCH] fbcon: Out-Of-Bounds write in sys_imageblit, add range check Thread-Index: AQHXghHvrDWkYfnua06MBXDuWeAYaw== Date: Mon, 26 Jul 2021 11:32:37 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.28.2.15] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org eXJlcyBhbmQgdnlyZXMgY2FuIGJlIGNvbnRyb2xsZWQgYnkgdXNlciBtb2RlIHBhcmFtYXRlcnMs IGFuZCBjYXVzZSBwLT52cm93cyB0byBiZWNvbWUgYSBuZWdhdGl2ZSB2YWx1ZS4gV2hpbGUgdGhp cyB2YWx1ZSBiZSBwYXNzZWQgdG8gcmVhbF95IGZ1bmN0aW9uLCB0aGUgeXBvcyB3aWxsIGJlIG91 dCBvZiBzY3JlZW4gcmFuZ2UuDQpUaGlzIGlzIGFuIG91dC1vZi1ib3VuZHMgd3JpdGUgYnVnLg0K DQoNCmRpZmYgLS1naXQgYS9kcml2ZXJzL3ZpZGVvL2ZiZGV2L2NvcmUvZmJjb24uYyBiL2RyaXZl cnMvdmlkZW8vZmJkZXYvY29yZS9mYmNvbi5jDQppbmRleCAyMmJiMzg5MmY2YmQuLjA5NzBkZTQ2 NzgyZiAxMDA2NDQNCi0tLSBhL2RyaXZlcnMvdmlkZW8vZmJkZXYvY29yZS9mYmNvbi5jDQorKysg Yi9kcml2ZXJzL3ZpZGVvL2ZiZGV2L2NvcmUvZmJjb24uYw0KQEAgLTE5NTYsMTEgKzE5NTYsMTIg QEAgc3RhdGljIHZvaWQgdXBkYXRlc2Nyb2xsbW9kZShzdHJ1Y3QgZmJjb25fZGlzcGxheSAqcCwN CiAgICAgICAgaW50IHlyZXMgPSBGQkNPTl9TV0FQKG9wcy0+cm90YXRlLCBpbmZvLT52YXIueXJl cywgaW5mby0+dmFyLnhyZXMpOw0KICAgICAgICBpbnQgdnlyZXMgPSBGQkNPTl9TV0FQKG9wcy0+ cm90YXRlLCBpbmZvLT52YXIueXJlc192aXJ0dWFsLA0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBpbmZvLT52YXIueHJlc192aXJ0dWFsKTsNCisgICAgICAgaW50IHJvd3MgPSB2 Yy0+dmNfcm93czsNCiANCiAgICAgICAgcC0+dnJvd3MgPSB2eXJlcy9maDsNCi0gICAgICAgaWYg KHlyZXMgPiAoZmggKiAodmMtPnZjX3Jvd3MgKyAxKSkpDQotICAgICAgICAgICAgICAgcC0+dnJv d3MgLT0gKHlyZXMgLSAoZmggKiB2Yy0+dmNfcm93cykpIC8gZmg7DQotICAgICAgIGlmICgoeXJl cyAlIGZoKSAmJiAodnlyZXMgJSBmaCA8IHlyZXMgJSBmaCkpDQorICAgICAgIGlmICgoeXJlcyA+ IChmaCAqIChyb3dzICsgMSkpKSAmJiAodnlyZXMgPj0gKHlyZXMgLSAoZmggKiByb3dzKSkpICYm IHAtPnZyb3dzKQ0KKyAgICAgICAgICAgICAgIHAtPnZyb3dzIC09ICh5cmVzIC0gKGZoICogcm93 cykpIC8gZmg7DQorICAgICAgIGlmICgoeXJlcyAlIGZoKSAmJiAodnlyZXMgJSBmaCA8IHlyZXMg JSBmaCkgJiYgcC0+dnJvd3MpDQogICAgICAgICAgICAgICAgcC0+dnJvd3MtLTsNCiB9DQoNCg==