Commit cf76e174 authored by Helge Deller's avatar Helge Deller Committed by Yongqiang Liu
Browse files

fbcon: Prevent that screen size is smaller than font size

mainline inclusion
from mainline-v5.19-rc6
commit e64242ca
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I5IQ4M


CVE: CVE-2021-33655

--------------------------------

We need to prevent that users configure a screen size which is smaller than the
currently selected font size. Otherwise rendering chars on the screen will
access memory outside the graphics memory region.

This patch adds a new function fbcon_modechange_possible() which
implements this check and which later may be extended with other checks
if necessary.  The new function is called from the FBIOPUT_VSCREENINFO
ioctl handler in fbmem.c, which will return -EINVAL if userspace asked
for a too small screen size.

Signed-off-by: default avatarHelge Deller <deller@gmx.de>
Reviewed-by: default avatarGeert Uytterhoeven <geert@linux-m68k.org>
Cc: stable@vger.kernel.org # v5.4+
Signed-off-by: default avatarChen Jun <chenjun102@huawei.com>

Conflicts:
	drivers/video/fbdev/core/fbcon.c
	drivers/video/fbdev/core/fbmem.c
	include/linux/fbcon.h
Reviewed-by: default avatarXiu Jianfeng <xiujianfeng@huawei.com>
Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarYongqiang Liu <liuyongqiang13@huawei.com>
parent 4040e24b
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment