[v4] vgacon: Fix a UAF in vgacon_invert_region

Linus Torvalds torvalds at linux-foundation.org
Fri Mar 6 12:55:05 UTC 2020


On Fri, Mar 6, 2020 at 4:38 AM Daniel Vetter <daniel at ffwll.ch> wrote:
>
> Linus, since this missed the -fixes pull from Dave maybe double check I'm
> not grossly wrong here and apply directly?

Hmm. I don't have the original email, mind just sending it to me (with
the proper added sign-off chain)?

It does strike me that there's nothing that seems to check for
overflow in the "(width << 1) * height" calculation. Hmm?

            Linus


More information about the dri-devel mailing list