Merge tag 'drm-fixes-2020-03-06-1' of git://anongit.freedesktop.org/drm/drm

Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

kernel os linux

Pull vgacon fix from Daniel Vetter:
"One vgacon input check for stable"

* tag 'drm-fixes-2020-03-06-1' of git://anongit.freedesktop.org/drm/drm:
vgacon: Fix a UAF in vgacon_invert_region

Linus Torvalds 6 years ago 2f501bb1 30fe0d07

1 changed file

expand all

drivers

video

console

vgacon.c

drivers/video/console/vgacon.c

··· 1316 1316 static int vgacon_resize(struct vc_data *c, unsigned int width, 1317 1317 unsigned int height, unsigned int user) 1318 1318 { 1319 + if ((width << 1) * height > vga_vram_size) 1320 + return -EINVAL; 1321 + 1319 1322 if (width % 2 || width > screen_info.orig_video_cols || 1320 1323 height > (screen_info.orig_video_lines * vga_default_font_height)/ 1321 1324 c->vc_font.height)