diff options
| author | Helge Deller <deller@gmx.de> | 2022-02-27 08:43:56 +0100 |
|---|---|---|
| committer | Helge Deller <deller@gmx.de> | 2022-02-27 08:43:56 +0100 |
| commit | bd771cf5c4254511cc4abb88f3dab3bd58bdf8e8 (patch) | |
| tree | 21186273f7b32374c7605edf9c85afbe3c9403bb /mm | |
| parent | video: fbdev: via: check the return value of kstrdup() (diff) | |
| download | linux-bd771cf5c4254511cc4abb88f3dab3bd58bdf8e8.tar.xz linux-bd771cf5c4254511cc4abb88f3dab3bd58bdf8e8.zip | |
video: fbdev: sm712fb: Fix crash in smtcfb_read()
Zheyu Ma reported this crash in the sm712fb driver when reading
three bytes from the framebuffer:
BUG: unable to handle page fault for address: ffffc90001ffffff
RIP: 0010:smtcfb_read+0x230/0x3e0
Call Trace:
vfs_read+0x198/0xa00
? do_sys_openat2+0x27d/0x350
? __fget_light+0x54/0x340
ksys_read+0xce/0x190
do_syscall_64+0x43/0x90
Fix it by removing the open-coded endianess fixup-code and
by moving the pointer post decrement out the fb_readl() function.
Reported-by: Zheyu Ma <zheyuma97@gmail.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Tested-by: Zheyu Ma <zheyuma97@gmail.com>
Cc: stable@vger.kernel.org
Diffstat (limited to 'mm')
0 files changed, 0 insertions, 0 deletions