diff options
| author | George Kennedy <george.kennedy@oracle.com> | 2020-07-31 18:33:11 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-08-18 13:22:55 +0200 |
| commit | 39b3cffb8cf3111738ea993e2757ab382253d86a (patch) | |
| tree | 8daabc30f6172e7e5c6acff872bdea89ad749c0a /drivers/tty/vt | |
| parent | vt: defer kfree() of vc_screenbuf in vc_do_resize() (diff) | |
| download | linux-39b3cffb8cf3111738ea993e2757ab382253d86a.tar.xz linux-39b3cffb8cf3111738ea993e2757ab382253d86a.zip | |
fbcon: prevent user font height or width change from causing potential out-of-bounds access
Add a check to fbcon_resize() to ensure that a possible change to user font
height or user font width will not allow a font data out-of-bounds access.
NOTE: must use original charcount in calculation as font charcount can
change and cannot be used to determine the font data allocated size.
Signed-off-by: George Kennedy <george.kennedy@oracle.com>
Cc: stable <stable@vger.kernel.org>
Reported-by: syzbot+38a3699c7eaf165b97a6@syzkaller.appspotmail.com
Link: https://lore.kernel.org/r/1596213192-6635-1-git-send-email-george.kennedy@oracle.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/tty/vt')
0 files changed, 0 insertions, 0 deletions