linux/drivers/char
Wolfgang Kroworsch a564738c1c vt: incomplete initialization of vc_tab_stop
Problem 1 (see patch below):
  vc_tab_stop is declared as an array of 8 unsigned ints in struct
  vc_data in include/linux/console_struct.h .
  In drivers/char/vt.c only 5 of these 8 unsigned ints get initialized
  leading to unintended tabulator placement on displays with more than
  160 columns text.

Problem 2 (open):
  Upcoming displays will have more than 256 columns of text leading to
  invalid memory access in drivers/char/vt.c during tabulator
  calculations:
    if (vc->vc_tab_stop[vc->vc_x >> 5] & (1 << (vc->vc_x & 31)))
	break;

Signed-off-by: Wolfgang Kroworsch <wolfgang@kroworsch.de>
Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-11-06 15:41:17 -08:00
..
agp Merge git://git.kernel.org/pub/scm/linux/kernel/git/kyle/parisc-2.6 2008-10-20 14:40:31 -07:00
hw_random Tidy up addresses in random drivers 2008-10-27 08:39:52 -07:00
ip2 device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
ipmi saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
mwave
pcmcia pcmcia: IRQ_TYPE_EXCLUSIVE is long obsoleted 2008-10-17 23:07:10 +02:00
rio
tpm tpm: don't export static functions 2008-10-20 08:50:24 -07:00
xilinx_hwicap device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
.gitignore
ChangeLog
Kconfig CHAR: Delete old and now unused M48T35 RTC driver for SGI IP27. 2008-10-30 14:44:35 +00:00
Makefile CHAR: Delete old and now unused M48T35 RTC driver for SGI IP27. 2008-10-30 14:44:35 +00:00
amiserial.c m68k: Disable Amiga serial console support if modular 2008-10-26 12:11:21 -07:00
apm-emulation.c
applicom.c applicom.c: fix apparently-broken code in do_ac_read() 2008-10-16 11:21:47 -07:00
applicom.h
bfin-otp.c
briq_panel.c
bsr.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
cd1865.h
consolemap.c
cp437.uni
cs5535_gpio.c
cyclades.c
defkeymap.c_shipped
defkeymap.map
digi1.h
digiFep1.h
digiPCI.h
ds1302.c rtc: use bcd2bin/bin2bcd 2008-10-20 08:52:41 -07:00
ds1620.c
dsp56k.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
dtlk.c
efirtc.c
epca.c epca: Add infinite break support 2008-10-20 09:41:06 -07:00
epca.h
epcaconfig.h
esp.c
generic_nvram.c
generic_serial.c
genrtc.c
hangcheck-timer.c
hpet.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
hvc_beat.c
hvc_console.c hvc_console: Remove __devexit annotation of hvc_remove() 2008-10-22 11:00:25 +11:00
hvc_console.h hvc_console: Remove __devexit annotation of hvc_remove() 2008-10-22 11:00:25 +11:00
hvc_irq.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_iseries.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_rtas.c
hvc_vio.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_xen.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvcs.c
hvsi.c
i8k.c
isicom.c
istallion.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
keyboard.c
lp.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
mbcs.c
mbcs.h
mem.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
misc.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
mmtimer.c
moxa.c char: moxa.c sparse annotation 2008-10-16 11:21:47 -07:00
moxa.h
mspec.c
mxser.c
mxser.h
n_hdlc.c
n_r3964.c
n_tty.c tty: rename the remaining oddly named n_tty functions 2008-10-13 09:51:45 -07:00
nozomi.c
nsc_gpio.c
nvram.c [PATCH] introduce fmode_t, do annotations 2008-10-21 07:47:06 -04:00
nwbutton.c
nwbutton.h
nwflash.c
pc8736x_gpio.c pc8736x_gpio: add support for PC87365 chips 2008-10-20 08:52:40 -07:00
ppdev.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
ps3flash.c
pty.c
random.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
raw.c [PATCH] kill the rest of struct file propagation in block ioctls 2008-10-21 07:49:14 -04:00
riscom8.c
riscom8.h
riscom8_reg.h
rocket.c
rocket.h
rocket_int.h
rtc.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
scc.h
scx200_gpio.c
selection.c
ser_a2232.c
ser_a2232.h
ser_a2232fw.ax
ser_a2232fw.h
serial167.c
snsc.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
snsc.h
snsc_event.c
sonypi.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
specialix.c
specialix_io8.h
stallion.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
sx.c Char: sx, remove bogus iomap 2008-10-20 08:52:36 -07:00
sx.h
sxboards.h
sxwindow.h
synclink.c
synclink_gt.c
synclinkmp.c
sysrq.c Fix documentation of sysrq-q 2008-10-20 08:52:34 -07:00
tb0219.c
tlclk.c
toshiba.c
tty_audit.c
tty_buffer.c
tty_io.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
tty_ioctl.c
tty_ldisc.c
tty_port.c tty: Fix tty_port kref screwup 2008-10-23 09:20:53 -07:00
vc_screen.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
viotape.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
virtio_console.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
vme_scc.c
vr41xx_giu.c drivers/char: use nr_irqs 2008-10-16 16:52:05 +02:00
vt.c vt: incomplete initialization of vc_tab_stop 2008-11-06 15:41:17 -08:00
vt_ioctl.c