![]() [ Upstream commit e421946be7d9bf545147bea8419ef8239cb7ca52 ]
The userspace program could pass any values to the driver through
ioctl() interface. If the driver doesn't check the value of pixclock,
it may cause divide-by-zero error.
In sisfb_check_var(), var->pixclock is used as a divisor to caculate
drate before it is checked against zero. Fix this by checking it
at the beginning.
This is similar to CVE-2022-3061 in i740fb which was fixed by
commit
|
||
---|---|---|
.. | ||
backlight | ||
console | ||
fbdev | ||
logo | ||
Kconfig | ||
Makefile | ||
aperture.c | ||
cmdline.c | ||
display_timing.c | ||
hdmi.c | ||
nomodeset.c | ||
of_display_timing.c | ||
of_videomode.c | ||
sticore.c | ||
vgastate.c | ||
videomode.c |