Thomas Zimmermann <[email protected]> writes:

Hello Thomas,

> Calculating the visible size of the system framebuffer can result in
> truncation of the result. The calculation uses 32-bit arithmetics,
> which can overflow if the values for height and stride are large. Fix
> the issue by multiplying with mul_u32_u32().
>
> Signed-off-by: Thomas Zimmermann <[email protected]>
> Fixes: 32ae90c66fb6 ("drm/sysfb: Add efidrm for EFI displays")
> Fixes: a84eb6abe2b6 ("drm/sysfb: Add vesadrm for VESA displays")
> Reported-by: Sashiko <[email protected]>
> Closes: 
> https://lore.kernel.org/dri-devel/[email protected]/
> Cc: Thomas Zimmermann <[email protected]>
> Cc: Javier Martinez Canillas <[email protected]>
> Cc: [email protected]
> Cc: <[email protected]> # v6.16+
> ---
> I've added Reported-by and Closes tags because this is a pre-existing issue.
> ---
>  drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c | 3 ++-
>  1 file changed, 2 insertions(+), 1 deletion(-)
>

Reviewed-by: Javier Martinez Canillas <[email protected]>

-- 
Best regards,

Javier Martinez Canillas
Core Platforms
Red Hat

Reply via email to