diff options
| author | Samuel CUELLA <[email protected]> | 2009-03-10 19:56:00 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2009-03-10 22:55:12 +0000 |
| commit | 16b71fdf97599f1b1b7f38418ee9922d9f117396 (patch) | |
| tree | 86ceac6117f5a678aaa177bbcdf8d84d2559010c /lib/bitmap.c | |
| parent | m68knommu: m528x build fix (diff) | |
| download | kernel-16b71fdf97599f1b1b7f38418ee9922d9f117396.tar.gz kernel-16b71fdf97599f1b1b7f38418ee9922d9f117396.zip | |
i810: fix kernel crash fix when struct fb_var_screeninfo is supplied
Prevent the kernel from being crashed by a divide-by-zero operation when
supplied an incorrectly filled 'struct fb_var_screeninfo' from userland.
Previously i810_main.c:1005 (i810_check_params) was using the global
'yres' symbol previously defined at i810_main.c:145 as a module parameter
value holder (i810_main.c:2174). If i810fb is compiled-in or if this
param doesn't get a default value, this direct usage leads to a
divide-by-zero at i810_main.c:1005 (i810_check_params). The patch simply
replace the 'yres' global, perhaps undefined symbol usage by a given
parameter structure lookup.
This problem occurs with directfb, mplayer -vo fbdev, SDL library.
It was also reported ( but non solved ) at:
http://mail.directfb.org/pipermail/directfb-dev/2008-March/004050.html
Signed-off-by: Samuel CUELLA <[email protected]>
Cc: Jiri Kosina <[email protected]>
Cc: Krzysztof Helt <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'lib/bitmap.c')
0 files changed, 0 insertions, 0 deletions
