George Kennedy 39b3cffb8c fbcon: prevent user font height or width change from causing potential out-of-bounds access ... Add a check to fbcon_resize() to ensure that a possible change to user font height or user font width will not allow a font data out-of-bounds access. NOTE: must use original charcount in calculation as font charcount can change and cannot be used to determine the font data allocated size. Signed-off-by: George Kennedy <george.kennedy@oracle.com> Cc: stable <stable@vger.kernel.org> Reported-by: syzbot+38a3699c7eaf165b97a6@syzkaller.appspotmail.com Link: https://lore.kernel.org/r/1596213192-6635-1-git-send-email-george.kennedy@oracle.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-08-18 13:22:55 +02:00
..
accessibility
acpi	More ACPI updates for 5.9-rc1	2020-08-15 08:18:22 -07:00
amba
android
ata
atm
auxdisplay
base
bcma
block	block-5.9-2020-08-14	2020-08-15 20:36:42 -07:00
bluetooth
bus
cdrom
char
clk	More ACPI updates for 5.9-rc1	2020-08-15 08:18:22 -07:00
clocksource	- Core Frameworks	2020-08-15 08:09:38 -07:00
connector
counter
cpufreq	cpufreq: intel_pstate: Implement passive mode with HWP enabled	2020-08-11 17:29:45 +02:00
cpuidle
crypto	virtio: fixes, features	2020-08-11 14:34:17 -07:00
dax	libnvdimm for 5.9	2020-08-11 10:59:19 -07:00
dca
devfreq
dio
dma
dma-buf	A set of locking fixes and updates:	2020-08-10 19:07:44 -07:00
edac	Fixes for ie31200 driver that missed the first pull	2020-08-15 08:25:41 -07:00
eisa
extcon
firewire
firmware	uaccess: add force_uaccess_{begin,end} helpers	2020-08-12 10:57:59 -07:00
fpga
fsi
gnss
gpio
gpu	pwm: Changes for v5.9-rc1	2020-08-14 16:00:09 -07:00
greybus
hid
hsi
hv	hyperv-fixes for 5.9-rc	2020-08-14 13:31:25 -07:00
hwmon	pwm: Changes for v5.9-rc1	2020-08-14 16:00:09 -07:00
hwspinlock
hwtracing
i2c	More ACPI updates for 5.9-rc1	2020-08-15 08:18:22 -07:00
i3c
ide
idle
iio
infiniband	mm/gup: remove task_struct pointer for all gup code	2020-08-12 10:58:04 -07:00
input	Cleanup, SECCOMP_FILTER support, message printing fixes, and other	2020-08-15 18:50:32 -07:00
interconnect
iommu	Merge branch 'akpm' (patches from Andrew)	2020-08-12 11:24:12 -07:00
ipack
irqchip
isdn
leds
lightnvm
macintosh
mailbox	iomap: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
mcb
md	block-5.9-2020-08-14	2020-08-15 20:36:42 -07:00
media	IOMMU Updates for Linux v5.9	2020-08-11 14:13:24 -07:00
memory	IOMMU Updates for Linux v5.9	2020-08-11 14:13:24 -07:00
memstick
message
mfd	- Core Frameworks	2020-08-15 08:09:38 -07:00
misc
mmc
most
mtd
mux	mux: adgs1408: Add mod_devicetable.h and remove of_match_ptr	2020-06-29 18:39:44 +02:00
net	rtl818x: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
nfc
ntb	ntb: intel: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
nubus
nvdimm	mm: add thp_size	2020-08-14 19:56:56 -07:00
nvme
nvmem
of
opp
oprofile
parisc	Merge branch 'parisc-5.9-2' of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux	2020-08-12 12:41:15 -07:00
parport
pci
pcmcia
perf
phy
pinctrl
platform	linux-watchdog 5.9-rc1 tag	2020-08-12 12:13:44 -07:00
pnp
power
powercap
pps
ps3
ptp
pwm	pwm: Changes for v5.9-rc1	2020-08-14 16:00:09 -07:00
rapidio	rapidio/rio_mport_cdev: use array_size() helper in copy_{from,to}_user()	2020-08-12 10:58:01 -07:00
ras
regulator
remoteproc	remoteproc updates for v5.9	2020-08-11 11:17:45 -07:00
reset
rpmsg
rtc	RTC for 5.9	2020-08-12 17:17:00 -07:00
s390	s390/pkey: remove redundant variable initialization	2020-08-11 18:16:31 +02:00
sbus
scsi	SCSI misc on 20200814	2020-08-14 16:01:59 -07:00
sfi
sh	iomap: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
siox
slimbus
soc
soundwire
spi
spmi
ssb
staging
target	SCSI misc on 20200814	2020-08-14 16:01:59 -07:00
tc
tee
thermal	- Core Frameworks	2020-08-15 08:09:38 -07:00
thunderbolt
tty	vt: defer kfree() of vc_screenbuf in vc_do_resize()	2020-08-18 13:18:17 +02:00
uio
usb
vdpa	virtio: fixes, features	2020-08-11 14:34:17 -07:00
vfio	VFIO updates for v5.9-rc1	2020-08-12 12:09:36 -07:00
vhost	virtio: fixes, features	2020-08-11 14:34:17 -07:00
video	fbcon: prevent user font height or width change from causing potential out-of-bounds access	2020-08-18 13:22:55 +02:00
virt
virtio	virtio: pci: constify ioreadX() iomem argument (as in generic implementation)	2020-08-14 19:56:57 -07:00
visorbus
vlynq
vme
w1
watchdog	linux-watchdog 5.9-rc1 tag	2020-08-12 12:13:44 -07:00
xen	xen: branch for v5.9-rc1b	2020-08-14 13:34:37 -07:00
zorro
Kconfig
Makefile