diff options
| author | George Kennedy <george.kennedy@oracle.com> | 2020-07-31 12:33:11 -0400 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2020-09-03 11:24:27 +0200 |
| commit | 72f099805dbc907fbe8fa19bccdc31d3e2ee6e9e (patch) | |
| tree | 6c986c27e0b813d425e70549d363551b557b0698 /drivers/usb/misc | |
| parent | b0186a11dfe7b2ee767b4e7acfea921594ecdb7f (diff) | |
fbcon: prevent user font height or width change from causing potential out-of-bounds access
commit 39b3cffb8cf3111738ea993e2757ab382253d86a upstream.
Add a check to fbcon_resize() to ensure that a possible change to user font
height or user font width will not allow a font data out-of-bounds access.
NOTE: must use original charcount in calculation as font charcount can
change and cannot be used to determine the font data allocated size.
Signed-off-by: George Kennedy <george.kennedy@oracle.com>
Cc: stable <stable@vger.kernel.org>
Reported-by: syzbot+38a3699c7eaf165b97a6@syzkaller.appspotmail.com
Link: https://lore.kernel.org/r/1596213192-6635-1-git-send-email-george.kennedy@oracle.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/misc')
0 files changed, 0 insertions, 0 deletions