Kees Cook 842803e4a6 video: uvesafb: Fix integer overflow in allocation ... commit 9f645bcc56 upstream. cmap->len can get close to INT_MAX/2, allowing for an integer overflow in allocation. This uses kmalloc_array() instead to catch the condition. Reported-by: Dr Silvio Cesare of InfoSect <silvio.cesare@gmail.com> Fixes: 8bdb3a2d7d ("uvesafb: the driver core") Cc: stable@vger.kernel.org Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-07-03 11:21:34 +02:00
..
backlight	backlight: tps65217_bl: Fix Device Tree node lookup	2018-07-03 11:21:32 +02:00
console	vgacon: Set VGA struct resource types	2018-03-24 10:58:48 +01:00
fbdev	video: uvesafb: Fix integer overflow in allocation	2018-07-03 11:21:34 +02:00
logo	video/logo: prevent use of logos after they have been freed	2014-12-29 10:06:55 +02:00
display_timing.c
hdmi.c	video/hdmi: Allow "empty" HDMI infoframes	2018-03-22 09:23:27 +01:00
Kconfig	drm: Remove two-level menu in Kconfig	2015-08-07 19:06:37 +02:00
Makefile
of_display_timing.c	video: of: fix memory leak	2015-10-07 14:13:59 +03:00
of_videomode.c	video: Fix possible leak in of_get_videomode()	2015-08-10 15:11:12 +03:00
vgastate.c	fbdev: vgastate: remove trailing whitespaces	2015-01-13 12:53:25 +02:00
videomode.c