Received: by 2002:ac0:e350:0:0:0:0:0 with SMTP id g16csp276756imn; Thu, 4 Aug 2022 05:43:46 -0700 (PDT) X-Google-Smtp-Source: AA6agR4Xy6kADbn1sPqpcxbGaQNwmknyC+FBjWMQZ3/uw/p4R9A9NA8Eug0oght1dfZxl3+Kjf2P X-Received: by 2002:a17:907:9687:b0:730:bc30:da36 with SMTP id hd7-20020a170907968700b00730bc30da36mr1194887ejc.417.1659617026467; Thu, 04 Aug 2022 05:43:46 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1659617026; cv=none; d=google.com; s=arc-20160816; b=i+QjWXXuyeC8AdU3+s//XXs47oT1N4YKHKAUc45u8Dkhr2GQiDciJzTjKOKzv6X89m wdBJlPMX5N3JJJj5bKzYkN4ai7YftMaYOfTzQX+YrKsa71d0+EhEGIano5lMunSwHU2R zQFW9c3KNbAO+AQpCLL9KgmwCth6tGQbxDIZvYvV5TMNEhh3OgcMgW/0R8KzZuP7Qrp1 GE+j0KoXThWsqzJnbZ9/yU4DhQKfsWeI4WCgBMUqPMDPuynpt731n4pi8FcnfoOAmKKO x9YICk0lKTwDbg1B9Uf8An/A08SiBdWXQmPR34lxXs5KZx690DufqWm6ccvz/cjP+Vjr sJNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from:dkim-signature; bh=Jxp/ZZ2IP/r5wdh/E9VL2sjWN7cCRv4O2EVI3aFNd88=; b=LH7xwvq0XPgRFslcIArNzn9fCqT28THEbe1zwiQwg58WgVIcvlOh85+IhUA1Ao3cZA P9slcdiRfGJSfTbBUIH4cY2fJnRK0aPwm5JlKX8PRceTjUQhQ74p8Sd4kvGFIeQJj+NO /1GCxVbrq4s2WetFRYsUxRmNQVtBgBeAoe3R0smVr2zGb/0OQ+H4DFF32RsA3WlV6vrP +DYRzcVu7KPjWEwNv5KJrIiAbm4tODCYSKFXzxKDIDyRWfxPuimV/Tm9gaOV3VLS7nTz dk8tUnH5oJ7vedrst7Ma367MhUeqSK7CbC8b8TS99TAyfaXDlmewSzMhc3I6qUgfSL+i M40Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=mB1b1iZj; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id eb6-20020a0564020d0600b0043cef71f8bbsi1325264edb.515.2022.08.04.05.43.20; Thu, 04 Aug 2022 05:43:46 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=mB1b1iZj; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239727AbiHDMls (ORCPT + 99 others); Thu, 4 Aug 2022 08:41:48 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:58464 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S239082AbiHDMlm (ORCPT ); Thu, 4 Aug 2022 08:41:42 -0400 Received: from mail-pf1-x42b.google.com (mail-pf1-x42b.google.com [IPv6:2607:f8b0:4864:20::42b]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 1EABC2AE3C; Thu, 4 Aug 2022 05:41:41 -0700 (PDT) Received: by mail-pf1-x42b.google.com with SMTP id f28so11000441pfk.1; Thu, 04 Aug 2022 05:41:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc; bh=Jxp/ZZ2IP/r5wdh/E9VL2sjWN7cCRv4O2EVI3aFNd88=; b=mB1b1iZj1jk6+iE3H8+0/DIUxhsUtKMmi1cUlKktRqiKRdQl6wcVCaH0fxiKE5L1St Oo0ssMdoZK+r/XpROJQAL4ajPnwpPXVyS3osq1JaxsveNY7yOUdGfwwVcgyxRjB/7+rD TatDIZp8jwH4Q892sSBKqahFwQjQh0tcbDYNmkFOpnl+GyaYDpreX6AY0LN/kjjWFVOp KjALY8HLg1vivHOSjiIKxVIuoT/K5JZwwypcojJ/gbMP0ILl+YPZy1lNDvz2V6+ybajI 5yjS77Vurc+ZDrE4mltLD27p3SSiNZrMPLy3NaQgwQ2c6Z6lz5tAfKQFxCDcvZoz+4o7 K7XA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc; bh=Jxp/ZZ2IP/r5wdh/E9VL2sjWN7cCRv4O2EVI3aFNd88=; b=h9zk69+U3nMJjofMCydSWGm8Rz295uBFKGmF7/Xzg68xyzzZ8PazD9dSuX90LlDcB4 cuGlEHd9MgOsFOd95b+oUgnzOV6RUkq/6zX5RGeDi6yVxTn9hSmow+JrmYahFmVl+RLB iojKZLiDNSMk64m+ZDakltjeD8TYl7nzTFRNEC1uMIdmqZosY3jwT8OGoDYLlHllcT1Y ewTWyZqBr106JWZepoPp2iC8VRxzFB8NyEpjXfoF9wQJXJqrt4qzPhqxyjwUJWXtToxi vKET+dn91jqfgHV8zxyCWo9iL7ES9E0H99tYOVqVvfIZ3G/HmTIPIZbOy4m/uikVYi7h jlKQ== X-Gm-Message-State: ACgBeo0eM7uUYGWwa4NCULvnMpRYCENGNMux2PPR1Wk7p2BlS4aN8YGO D2TPWvH/6Sa71ARNChIAe+6XEFEMJrpOWVA= X-Received: by 2002:a05:6a00:1c4b:b0:52e:6c05:8f1f with SMTP id s11-20020a056a001c4b00b0052e6c058f1fmr1746153pfw.7.1659616900533; Thu, 04 Aug 2022 05:41:40 -0700 (PDT) Received: from localhost.localdomain ([166.111.133.51]) by smtp.gmail.com with ESMTPSA id i8-20020a63bf48000000b0041b672e93c2sm1070769pgo.17.2022.08.04.05.41.38 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 04 Aug 2022 05:41:40 -0700 (PDT) From: Zheyu Ma To: deller@gmx.de, adaplas@gmail.com, santiago@crfreenet.org, akpm@linux-foundation.org Cc: linux-fbdev@vger.kernel.org, dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org, Zheyu Ma Subject: [PATCH 0/3] Fix bugs in *_set_par() caused by user input Date: Thu, 4 Aug 2022 20:41:22 +0800 Message-Id: <20220804124125.3506755-1-zheyuma97@gmail.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Status: No, score=-1.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT, FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org In the function *_set_par(), the value of 'screen_size' is calculated by the user input. If the user provides the improper value, the value of 'screen_size' may larger than 'info->screen_size', which may cause a bug in the memset_io(). Zheyu Ma (3): video: fbdev: vt8623fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: s3fb: Check the size of screen before memset_io() drivers/video/fbdev/arkfb.c | 2 ++ drivers/video/fbdev/s3fb.c | 2 ++ drivers/video/fbdev/vt8623fb.c | 2 ++ 3 files changed, 6 insertions(+) -- 2.25.1