Tetsuo Handa bd018a6a75 video: fbdev: fix OOB read in vga_8planes_imageblit() ... syzbot is reporting OOB read at vga_8planes_imageblit() [1], for "cdat[y] >> 4" can become a negative value due to "const char *cdat". [1] https://syzkaller.appspot.com/bug?id=0d7a0da1557dcd1989e00cb3692b26d4173b4132 Reported-by: syzbot <syzbot+69fbd3e01470f169c8c4@syzkaller.appspotmail.com> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Cc: stable <stable@vger.kernel.org> Link: https://lore.kernel.org/r/90b55ec3-d5b0-3307-9f7c-7ff5c5fd6ad3@i-love.sakura.ne.jp Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-09-04 17:27:10 +02:00
..
accessibility	Char/Misc driver fixes for 5.9-rc3	2020-08-26 10:50:50 -07:00
acpi	Merge branch 'acpi-mm'	2020-08-28 21:17:56 +02:00
amba
android
ata	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
atm	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
auxdisplay	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
base	Device properties framework fix for 5.9-rc3	2020-08-28 13:23:31 -07:00
bcma
block	block-5.9-2020-08-28	2020-08-28 16:38:29 -07:00
bluetooth
bus	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
cdrom
char	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2020-08-30 15:53:44 -07:00
clk	More ACPI updates for 5.9-rc1	2020-08-15 08:18:22 -07:00
clocksource	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
connector
counter
cpufreq	Power management fixes for 5.9-rc3	2020-08-28 13:12:09 -07:00
cpuidle	cpuidle: Make CPUIDLE_FLAG_TLB_FLUSHED generic	2020-08-26 12:41:53 +02:00
crypto	Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6	2020-08-30 15:53:44 -07:00
dax	dax: do not print error message for non-persistent memory block device	2020-08-20 11:43:18 -06:00
dca
devfreq
dio
dma	fsldma: fix very broken 32-bit ppc ioread64 functionality	2020-08-29 13:50:56 -07:00
dma-buf
edac	A fix to properly clear ghes_edac driver state on driver remove so that	2020-08-30 10:47:23 -07:00
eisa
extcon
firewire	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
firmware	A set of fixes for interrupt chip drivers:	2020-08-30 11:56:54 -07:00
fpga
fsi
gnss
gpio	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
gpu	drm fixes for 5.9-rc3	2020-08-28 09:46:48 -07:00
greybus
hid	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid	2020-08-25 11:13:29 -07:00
hsi	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
hv	hyperv-fixes for 5.9-rc3	2020-08-26 10:44:15 -07:00
hwmon	hwmon fixes for v5.9-rc3	2020-08-29 12:37:00 -07:00
hwspinlock
hwtracing	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
i2c	Merge branch 'i2c/for-current' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux	2020-08-29 13:13:44 -07:00
i3c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
ide	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
idle	cpuidle: Make CPUIDLE_FLAG_TLB_FLUSHED generic	2020-08-26 12:41:53 +02:00
iio	iio: dpot-dac: fix code comment in dpot_dac_read_raw()	2020-08-26 14:02:24 -05:00
infiniband	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
input	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
interconnect	interconnect: qcom: Fix small BW votes being truncated to zero	2020-09-04 00:07:12 +03:00
iommu	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
ipack
irqchip	A set of fixes for interrupt chip drivers:	2020-08-30 11:56:54 -07:00
isdn	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
leds
lightnvm	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
macintosh	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
mailbox	iomap: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
mcb
md	block-5.9-2020-08-28	2020-08-28 16:38:29 -07:00
media	media: dib0700: Fix identation issue in dib8096_set_param_override()	2020-08-27 15:36:28 -05:00
memory	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
memstick	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
message	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
mfd	- Bug Fixes	2020-08-28 10:15:33 -07:00
misc	habanalabs: fix report of RAZWI initiator coordinates	2020-08-31 15:10:27 +03:00
mmc	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
most
mtd
mux	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
net	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
nfc	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
ntb	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
nubus
nvdimm	libnvdimm: KASAN: global-out-of-bounds Read in internal_create_group	2020-08-17 14:47:38 -06:00
nvme	io_uring-5.9-2020-08-23	2020-08-24 11:53:15 -07:00
nvmem
of	of: address: Work around missing device_type property in pcie nodes	2020-08-19 16:30:57 -06:00
opp	opp: Enable resources again if they were disabled earlier	2020-08-20 11:30:22 +05:30
oprofile
parisc	Merge branch 'parisc-5.9-2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux	2020-08-12 12:41:15 -07:00
parport	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
pci	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
pcmcia	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
perf	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
phy	phy: fixes for 5.9	2020-09-04 12:41:55 +02:00
pinctrl
platform	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
pnp
power	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
powercap
pps
ps3	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
ptp	ptp: ptp_clockmatrix: use i2c_master_send for i2c write	2020-08-19 16:23:22 -07:00
pwm	pwm: Changes for v5.9-rc1	2020-08-14 16:00:09 -07:00
rapidio	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
ras
regulator	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
remoteproc	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
reset	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
rpmsg	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
rtc	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
s390	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
sbus
scsi	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
sfi
sh	iomap: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
siox
slimbus
soc	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
soundwire	soundwire: fix double free of dangling pointer	2020-09-03 14:10:19 +05:30
spi	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
spmi
ssb	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
staging	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
target	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
tc
tee
thermal	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
thunderbolt	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
tty	TTY/Serial fixes for 5.9-rc3	2020-08-26 10:58:20 -07:00
uio
usb	USB fixes for 5.9-rc3 - take 2	2020-08-30 10:51:03 -07:00
vdpa	vdpa/mlx5: Avoid warnings about shifts on 32-bit platforms	2020-08-26 08:13:59 -04:00
vfio	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
vhost	vhost-iotlb: fix vhost_iotlb_itree_next() documentation	2020-08-26 08:13:59 -04:00
video	video: fbdev: fix OOB read in vga_8planes_imageblit()	2020-09-04 17:27:10 +02:00
virt
virtio	virtio: pci: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
visorbus
vlynq
vme
w1
watchdog	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
xen	xen: branch for v5.9-rc3	2020-08-29 12:44:30 -07:00
zorro
Kconfig
Makefile