[v4] vgacon: Fix a UAF in vgacon_invert_region
Linus Torvalds
torvalds at linux-foundation.org
Fri Mar 6 12:55:05 UTC 2020
On Fri, Mar 6, 2020 at 4:38 AM Daniel Vetter <daniel at ffwll.ch> wrote:
>
> Linus, since this missed the -fixes pull from Dave maybe double check I'm
> not grossly wrong here and apply directly?
Hmm. I don't have the original email, mind just sending it to me (with
the proper added sign-off chain)?
It does strike me that there's nothing that seems to check for
overflow in the "(width << 1) * height" calculation. Hmm?
Linus
More information about the dri-devel
mailing list