diff options
| author | Nikita Zhandarovich <[email protected]> | 2025-01-16 13:48:01 +0000 |
|---|---|---|
| committer | Alex Lanzano <[email protected]> | 2025-02-25 00:43:23 +0000 |
| commit | 4d098000ac193f359e6b8ca4801dbdbd6a27b41f (patch) | |
| tree | fdeb986599a163349c198ffb9fa5eda2c89963f0 /drivers/gpu/drm/amd/amdgpu/amdgpu_isp.c | |
| parent | drm/bridge: ti-sn65dsi86: Check for CONFIG_PWM using IS_REACHABLE() (diff) | |
| download | kernel-4d098000ac193f359e6b8ca4801dbdbd6a27b41f.tar.gz kernel-4d098000ac193f359e6b8ca4801dbdbd6a27b41f.zip | |
drm/repaper: fix integer overflows in repeat functions
There are conditions, albeit somewhat unlikely, under which right hand
expressions, calculating the end of time period in functions like
repaper_frame_fixed_repeat(), may overflow.
For instance, if 'factor10x' in repaper_get_temperature() is high
enough (170), as is 'epd->stage_time' in repaper_probe(), then the
resulting value of 'end' will not fit in unsigned int expression.
Mitigate this by casting 'epd->factored_stage_time' to wider type before
any multiplication is done.
Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.
Fixes: 3589211e9b03 ("drm/tinydrm: Add RePaper e-ink driver")
Cc: [email protected]
Signed-off-by: Nikita Zhandarovich <[email protected]>
Signed-off-by: Alex Lanzano <[email protected]>
Link: https://patchwork.freedesktop.org/patch/msgid/[email protected]
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_isp.c')
0 files changed, 0 insertions, 0 deletions