OpenE2K/linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
9cd1c67434
linux/drivers/video
History
Antonino A. Daplas 9cd1c67434 pvr2fb: Fix oops when pseudo_palette is written 
Reported by: Adrian McMenamin <adrianmcmenamin@gmail.com>

This driver will oops when the pseudo_palette[] is written as u32 but not when
written as u16.  When written as u32, it corrupts the adjacent 'mmio_base'
field of struct pvr2fb_par.  Fix by using framebuffer_alloc()/release() to
allocate struct fb_info and struct pvr2fb_par, and create the pseudo_palette[]
as part of struct pvr2fb_par.

Signed-off-by: Antonino Daplas <adaplas@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2007-08-11 15:47:40 -07:00
..
aty Merge branch 'for-linus' of git://git.o-hand.com/linux-rpurdie-backlight 2007-07-22 11:19:46 -07:00
backlight Merge branch 'for-linus' of git://git.o-hand.com/linux-rpurdie-backlight 2007-07-22 11:19:46 -07:00
console fbcon: Kill compile warning 2007-08-11 15:47:40 -07:00
display
geode lxfb: GEODE: Add framebuffer support for the AMD Geode LX 2007-07-31 15:39:37 -07:00
i810 i810fb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
intelfb intelfb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
kyro
logo Merge git://git.kernel.org/pub/scm/linux/kernel/git/sam/kbuild 2007-07-19 14:28:19 -07:00
matrox drivers/*: mark variables with uninitialized_var() 2007-07-17 16:23:19 -04:00
mbx
nvidia Merge branch 'for-linus' of git://git.o-hand.com/linux-rpurdie-backlight 2007-07-22 11:19:46 -07:00
omap OMAP: LCD panel support for the Siemens SX1 mobile phone 2007-07-17 10:23:15 -07:00
pnx4008
riva Merge branch 'for-linus' of git://git.o-hand.com/linux-rpurdie-backlight 2007-07-22 11:19:46 -07:00
savage some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
sis sisfb: fix pseudo_palette array size and overrun 2007-07-17 10:23:13 -07:00
vermilion
68328fb.c 68328fb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:11 -07:00
acornfb.c Remove the arm26 port 2007-07-31 15:39:39 -07:00
acornfb.h
amba-clcd.c some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
amifb.c
arcfb.c
arkfb.c
asiliantfb.c
atafb_iplan2p2.c
atafb_iplan2p4.c
atafb_iplan2p8.c
atafb_mfb.c
atafb_utils.h
atafb.c
atafb.h
atmel_lcdfb.c atmel_lcdfb: use spare bits in 32bpp mode as alpha channel 2007-07-21 17:49:17 -07:00
au1100fb.c
au1100fb.h
au1200fb.c some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
au1200fb.h
bt431.h
bt455.h
bw2.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
c2p.c
c2p.h
cfbcopyarea.c
cfbfillrect.c
cfbimgblt.c
cg3.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
cg6.c [CG6]: fix memory size detection 2007-08-03 14:08:26 -07:00
cg14.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
chipsfb.c chipsfb: use correct pm state 2007-07-26 11:35:18 -07:00
cirrusfb.c
clps711xfb.c some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
controlfb.c controlfb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:11 -07:00
controlfb.h
cyber2000fb.c some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
cyber2000fb.h
cyblafb.c cyblafb: fix pseudo_palette array overrun in setcolreg 2007-07-17 10:23:12 -07:00
dnfb.c
edid.h
epson1355fb.c fb: epson1355fb: kill off dead sh support 2007-07-17 10:23:13 -07:00
fb_ddc.c
fb_defio.c
fb_draw.h
fb_notify.c
fb_sys_fops.c
fbcmap.c
fbcvt.c
fbmem.c fbdev: Fix logo if logo depth is less than framebuffer depth 2007-07-31 15:39:37 -07:00
fbmon.c
fbsysfs.c
ffb.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
fm2fb.c fm2fb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
g364fb.c
gbefb.c gbefb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
gxt4500.c
hecubafb.c
hgafb.c
hitfb.c
hpfb.c
igafb.c [SPARC]: Fix serial console device detection. 2007-07-20 16:59:26 -07:00
imacfb.c
imsttfb.c
imxfb.c
imxfb.h
Kconfig remove tx3912fb 2007-07-31 15:39:41 -07:00
leo.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
macfb.c macfb: fix pseudo_palette size and overrun 2007-07-17 10:23:12 -07:00
macmodes.c drivers/video/macmodes.c:mac_find_mode() mustn't be __devinit 2007-07-17 10:23:13 -07:00
macmodes.h drivers/video/macmodes.c:mac_find_mode() mustn't be __devinit 2007-07-17 10:23:13 -07:00
Makefile remove tx3912fb 2007-07-31 15:39:41 -07:00
maxinefb.c
modedb.c
neofb.c
offb.c offb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
output.c
p9100.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
platinumfb.c platinumfb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
platinumfb.h
pm2fb.c pm2fb: white spaces clean up 2007-07-17 10:23:11 -07:00
pm3fb.c pm3fb: possible cleanups 2007-07-17 10:23:13 -07:00
pmag-aa-fb.c
pmag-ba-fb.c
pmagb-b-fb.c
ps3fb.c ps3fb: Set FBINFO_READS_FAST to speed up text console scrolling 2007-07-21 17:49:16 -07:00
pvr2fb.c pvr2fb: Fix oops when pseudo_palette is written 2007-08-11 15:47:40 -07:00
pxafb.c
pxafb.h
q40fb.c q40fb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
s1d13xxxfb.c
s3c2410fb.c s3c2410fb: fix s3c2410 compilation 2007-07-31 15:39:37 -07:00
s3c2410fb.h s3c2410fb: fix s3c2410 compilation 2007-07-31 15:39:37 -07:00
s3fb.c
sa1100fb.c
sa1100fb.h
sbuslib.c [SPARC]: Mark SBUS framebuffer ioctls as IGNORE in compat_ioctl.c 2007-07-30 00:27:36 -07:00
sbuslib.h
sgivwfb.c sgivwfb: the pseudo_palette is only 16 elements long 2007-07-17 10:23:12 -07:00
skeletonfb.c
sm501fb.c
sstfb.c
sticore.h
stifb.c stifb: detect cards in double buffer mode more reliably 2007-08-11 15:47:40 -07:00
sunxvr500.c
sunxvr2500.c
svgalib.c
syscopyarea.c
sysfillrect.c
sysimgblt.c
tcx.c [VIDEO]: Fix OOPS in all SBUS framebuffer drivers. 2007-07-30 00:27:33 -07:00
tdfxfb.c
tgafb.c drivers/ misc __iomem annotations 2007-07-26 11:11:57 -07:00
tridentfb.c tridentfb: fix pseudo_palette array overrun in setcolreg 2007-07-17 10:23:12 -07:00
valkyriefb.c some kmalloc/memset ->kzalloc (tree wide) 2007-07-19 10:04:50 -07:00
valkyriefb.h
vesafb.c
vfb.c
vga16fb.c
vgastate.c
vt8623fb.c vt8623fb.c: make code static 2007-07-17 10:23:13 -07:00
w100fb.c
w100fb.h
xilinxfb.c xilinxfb: Don't bail if the xilinxfb platform device doesn't have any pdata 2007-07-31 15:39:37 -07:00