mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-13 14:24:11 +08:00
04e5eac8f3
The userspace program could pass any values to the driver through
ioctl() interface. If the driver doesn't check the value of pixclock,
it may cause divide-by-zero error.
Although pixclock is checked in savagefb_decode_var(), but it is not
checked properly in savagefb_probe(). Fix this by checking whether
pixclock is zero in the function savagefb_check_var() before
info->var.pixclock is used as the divisor.
This is similar to CVE-2022-3061 in i740fb which was fixed by
commit
|
||
---|---|---|
.. | ||
backlight | ||
console | ||
fbdev | ||
logo | ||
aperture.c | ||
cmdline.c | ||
display_timing.c | ||
hdmi.c | ||
Kconfig | ||
Makefile | ||
nomodeset.c | ||
of_display_timing.c | ||
of_videomode.c | ||
sticore.c | ||
vgastate.c | ||
videomode.c |