Zheng Wang c75f5a5506 fbdev: imsttfb: Fix use after free bug in imsttfb_probe ...

A use-after-free bug may occur if init_imstt invokes framebuffer_release
and free the info ptr. The caller, imsttfb_probe didn't notice that and
still keep the ptr as private data in pdev.

If we remove the driver which will call imsttfb_remove to make cleanup,
UAF happens.

Fix it by return error code if bad case happens in init_imstt.

Signed-off-by: Zheng Wang <zyytlz.wz@163.com>
Signed-off-by: Helge Deller <deller@gmx.de>

2023-05-11 22:58:59 +02:00

..

backlight

- Fix-ups

2023-05-02 10:46:11 -07:00

console

VT: Bump font size limitation to 64x128 pixels

2023-01-19 16:29:01 +01:00

fbdev

fbdev: imsttfb: Fix use after free bug in imsttfb_probe

2023-05-11 22:58:59 +02:00

logo

drivers: video: logo: add SPDX comment, remove GPL notice in pnmtologo.c

2023-03-14 18:49:39 +01:00

aperture.c

video/aperture: Fix typos in comments

2023-04-04 12:40:08 +02:00

cmdline.c

fbdev: Handle video= parameter in video/cmdline.c

2023-02-20 14:56:48 +01:00

display_timing.c

…

hdmi.c

video/hdmi: Add audio_infoframe packing for DP

2022-09-04 15:31:59 +03:00

Kconfig

fbdev: Handle video= parameter in video/cmdline.c

2023-02-20 14:56:48 +01:00

Makefile

fbdev: Handle video= parameter in video/cmdline.c

2023-02-20 14:56:48 +01:00

nomodeset.c

drm: Move nomodeset kernel parameter to drivers/video

2022-11-16 13:26:12 +01:00

of_display_timing.c

video: fbdev: of: display_timing: Remove a redundant zeroing of memory

2022-04-04 08:55:23 +02:00

of_videomode.c

…

vgastate.c

…

videomode.c

…