linux/drivers/video
Fullway Wang 04e5eac8f3 fbdev: savage: Error out if pixclock equals zero
The userspace program could pass any values to the driver through
ioctl() interface. If the driver doesn't check the value of pixclock,
it may cause divide-by-zero error.

Although pixclock is checked in savagefb_decode_var(), but it is not
checked properly in savagefb_probe(). Fix this by checking whether
pixclock is zero in the function savagefb_check_var() before
info->var.pixclock is used as the divisor.

This is similar to CVE-2022-3061 in i740fb which was fixed by
commit 15cf0b8.

Signed-off-by: Fullway Wang <fullwaywang@outlook.com>
Signed-off-by: Helge Deller <deller@gmx.de>
2024-01-21 09:00:14 +01:00
..
backlight - New Drivers 2024-01-18 16:53:35 -08:00
console vgacon: drop IA64 reference in VGA_CONSOLE dependency list 2023-11-28 19:04:20 +00:00
fbdev fbdev: savage: Error out if pixclock equals zero 2024-01-21 09:00:14 +01:00
logo video/logo: use %u format specifier for unsigned int values 2024-01-12 12:38:37 +01:00
aperture.c video/aperture: Provide a VGA helper for gma500 and internal use 2023-04-16 14:18:10 +02:00
cmdline.c fbdev: Handle video= parameter in video/cmdline.c 2023-02-20 14:56:48 +01:00
display_timing.c
hdmi.c video/hdmi: Add audio_infoframe packing for DP 2022-09-04 15:31:59 +03:00
Kconfig video: logo: LOGO should depend on FB_CORE i.s.o. FB 2023-07-28 11:48:30 +02:00
Makefile video: Move HP PARISC STI core code to shared location 2023-04-20 10:04:51 +02:00
nomodeset.c drm: Move nomodeset kernel parameter to drivers/video 2022-11-16 13:26:12 +01:00
of_display_timing.c video: fbdev: of: display_timing: Remove a redundant zeroing of memory 2022-04-04 08:55:23 +02:00
of_videomode.c
sticore.c video/sticore: Store ROM device in STI struct 2024-01-12 12:38:37 +01:00
vgastate.c
videomode.c