moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
8fb4c98f20dfca1237de2e3dfdbe78d156784fd3
kernel_arpi/drivers/video/fbdev
History
Tetsuo Handa 88ec6d1105 fbdev: fbcon: release buffer when fbcon_do_set_font() failed 
commit 3c3bfb8586f848317ceba5d777e11204ba3e5758 upstream.

syzbot is reporting memory leak at fbcon_do_set_font() [1], for
commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when
vc_resize() failed") missed that the buffer might be newly allocated
by fbcon_set_font().

Link: https://syzkaller.appspot.com/bug?extid=25bdb7b1703639abd498 [1]
Reported-by: syzbot <syzbot+25bdb7b1703639abd498@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Tested-by: syzbot <syzbot+25bdb7b1703639abd498@syzkaller.appspotmail.com>
Fixes: a5a923038d70 ("fbdev: fbcon: Properly revert changes when vc_resize() failed")
CC: stable@vger.kernel.org # 5.15+
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-12-31 13:14:47 +01:00
..
aty
…
core
fbdev: fbcon: release buffer when fbcon_do_set_font() failed
2022-12-31 13:14:47 +01:00
geode
fbdev: geode: don't build on UML
2022-12-31 13:14:32 +01:00
i810
…
intelfb
…
kyro
…
matrox
video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to avoid black screen
2022-04-08 14:23:14 +02:00
mb862xx
…
mmp
…
nvidia
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
2022-04-08 14:23:59 +02:00
omap
…
omap2
video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
2022-04-08 14:24:01 +02:00
riva
…
savage
…
sis
video: fbdev: sis: fix typos in SiS_GetModeID()
2022-08-17 14:24:11 +02:00
vermilion
fbdev: vermilion: decrease reference count in error path
2022-12-31 13:14:32 +01:00
via
fbdev: via: Fix error in via_core_init()
2022-12-31 13:14:31 +01:00
68328fb.c
…
acornfb.c
…
acornfb.h
…
amba-clcd.c
video: fbdev: amba-clcd: Fix refcount leak bugs
2022-08-17 14:24:11 +02:00
amifb.c
…
arcfb.c
…
arkfb.c
video: fbdev: arkfb: Check the size of screen before memset_io()
2022-08-17 14:24:16 +02:00
asiliantfb.c
…
atafb_iplan2p2.c
…
atafb_iplan2p4.c
…
atafb_iplan2p8.c
…
atafb_mfb.c
…
atafb_utils.h
…
atafb.c
video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
2022-04-08 14:23:00 +02:00
atafb.h
…
atmel_lcdfb.c
video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
2022-04-08 14:23:14 +02:00
au1100fb.c
…
au1100fb.h
…
au1200fb.c
…
au1200fb.h
…
broadsheetfb.c
…
bt431.h
…
bt455.h
…
bw2.c
…
c2p_core.h
…
c2p_iplan2.c
…
c2p_planar.c
…
c2p.h
…
carminefb_regs.h
…
carminefb.c
…
carminefb.h
…
cg3.c
…
cg6.c
…
cg14.c
…
chipsfb.c
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
2022-09-15 11:30:01 +02:00
cirrusfb.c
video: fbdev: cirrusfb: check pixclock to avoid divide by zero
2022-04-08 14:24:00 +02:00
clps711x-fb.c
…
cobalt_lcdfb.c
…
controlfb.c
video: fbdev: controlfb: Fix COMPILE_TEST build
2022-04-08 14:23:14 +02:00
controlfb.h
…
cyber2000fb.c
…
cyber2000fb.h
…
da8xx-fb.c
…
dnfb.c
…
edid.h
…
efifb.c
fbdev: efifb: Fix a use-after-free due early fb_info cleanup
2022-05-18 10:26:49 +02:00
ep93xx-fb.c
fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe()
2022-12-31 13:14:32 +01:00
ffb.c
…
fm2fb.c
…
fsl-diu-fb.c
…
g364fb.c
…
gbefb.c
…
goldfishfb.c
…
grvga.c
…
gxt4500.c
…
hecubafb.c
…
hgafb.c
…
hitfb.c
…
hpfb.c
…
hyperv_fb.c
video: hyperv_fb: Avoid taking busy spinlock on panic path
2022-12-31 13:14:39 +01:00
i740_reg.h
…
i740fb.c
video: fbdev: i740fb: Error out if 'pixclock' equals zero
2022-09-23 14:15:49 +02:00
imsttfb.c
…
imxfb.c
…
Kconfig
fbdev: uvesafb: don't build on UML
2022-12-31 13:14:32 +01:00
leo.c
…
macfb.c
…
macmodes.c
…
macmodes.h
…
Makefile
…
maxinefb.c
…
metronomefb.c
…
mx3fb.c
…
n411.c
…
neofb.c
…
ocfb.c
…
offb.c
…
p9100.c
…
platinumfb.c
…
platinumfb.h
…
pm2fb.c
fbdev: pm2fb: fix missing pci_disable_device()
2022-12-31 13:14:31 +01:00
pm3fb.c
…
pmag-aa-fb.c
…
pmag-ba-fb.c
…
pmagb-b-fb.c
…
ps3fb.c
…
pvr2fb.c
…
pxa3xx-gcu.c
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
2022-09-23 14:15:51 +02:00
pxa3xx-gcu.h
…
pxa168fb.c
…
pxa168fb.h
…
pxafb.c
…
pxafb.h
…
q40fb.c
…
s1d13xxxfb.c
…
s3c2410fb-regs-lcd.h
…
s3c2410fb.c
…
s3c2410fb.h
…
s3c-fb.c
…
s3fb.c
video: fbdev: s3fb: Check the size of screen before memset_io()
2022-08-17 14:24:16 +02:00
sa1100fb.c
…
sa1100fb.h
…
sbuslib.c
…
sbuslib.h
…
sh7760fb.c
…
sh_mobile_lcdcfb.c
…
sh_mobile_lcdcfb.h
…
simplefb.c
fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove
2022-05-18 10:26:48 +02:00
skeletonfb.c
…
sm501fb.c
…
sm712.h
…
sm712fb.c
video: fbdev: sm712fb: Fix crash in smtcfb_write()
2022-04-08 14:24:02 +02:00
smscufx.c
fbdev: smscufx: Fix several use-after-free bugs
2022-11-03 23:59:12 +09:00
ssd1307fb.c
…
sstfb.c
…
sticore.h
parisc/stifb: Keep track of hardware path of graphics card
2022-06-09 10:22:26 +02:00
stifb.c
fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
2022-11-10 18:15:32 +01:00
sunxvr500.c
…
sunxvr1000.c
…
sunxvr2500.c
…
tcx.c
…
tdfxfb.c
…
tgafb.c
…
tmiofb.c
…
tridentfb.c
…
udlfb.c
video: fbdev: udlfb: properly check endpoint type
2022-05-09 09:14:31 +02:00
uvesafb.c
fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
2022-12-31 13:14:32 +01:00
valkyriefb.c
…
valkyriefb.h
…
vesafb.c
video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
2022-06-09 10:23:16 +02:00
vfb.c
…
vga16fb.c
video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
2022-01-20 09:13:14 +01:00
vt8500lcdfb.c
…
vt8500lcdfb.h
…
vt8623fb.c
video: fbdev: vt8623fb: Check the size of screen before memset_io()
2022-08-17 14:24:16 +02:00
w100fb.c
video: fbdev: w100fb: Reset global state
2022-04-08 14:23:59 +02:00
w100fb.h
…
wm8505fb_regs.h
…
wm8505fb.c
…
wmt_ge_rops.c
…
wmt_ge_rops.h
…
xen-fbfront.c
…
xilinxfb.c
…