[PATCH] fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
Helge Deller
deller at gmx.de
Thu May 15 15:09:49 UTC 2025
On 5/14/25 22:35, Sergey Shtylyov wrote:
> In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000,
> cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's
> then passed to fb_cvt_hperiod(), where it's used as a divider -- division
> by 0 will result in kernel oops. Add a sanity check for cvt.f_refresh to
> avoid such overflow...
>
> Found by Linux Verification Center (linuxtesting.org) with the Svace static
> analysis tool.
>
> Fixes: 96fe6a2109db ("[PATCH] fbdev: Add VESA Coordinated Video Timings (CVT) support")
> Signed-off-by: Sergey Shtylyov <s.shtylyov at omp.ru>
>
> ---
> The patch is against the master branch of Linus Torvalds' linux.git repo.
>
> drivers/video/fbdev/core/fbcvt.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
applied.
Thanks!
Helge
More information about the dri-devel
mailing list