Phillip Potter 92194685fd fbdev: zero-fill colormap in fbcmap.c ...

commit 19ab233989d0f7ab1de19a036e247afa4a0a1e9c upstream.

Use kzalloc() rather than kmalloc() for the dynamically allocated parts
of the colormap in fb_alloc_cmap_gfp, to prevent a leak of random kernel
data to userspace under certain circumstances.

Fixes a KMSAN-found infoleak bug reported by syzbot at:
https://syzkaller.appspot.com/bug?id=741578659feabd108ad9e06696f0c1f2e69c4b6e

Reported-by: syzbot+47fa9c9c648b765305b9@syzkaller.appspotmail.com
Cc: stable <stable@vger.kernel.org>
Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be>
Signed-off-by: Phillip Potter <phil@philpotter.co.uk>
Link: https://lore.kernel.org/r/20210331220719.1499743-1-phil@philpotter.co.uk
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-05-22 10:38:17 +02:00

..

cfbcopyarea.c

…

cfbfillrect.c

…

cfbimgblt.c

…

fb_cmdline.c

…

fb_ddc.c

fb_ddc: Allow I2C adapters without SCL read capability

2015-09-30 10:46:55 +03:00

fb_defio.c

framebuffer: don't link fb_devio into kernel image unconditionally

2015-05-07 13:59:45 +03:00

fb_draw.h

…

fb_notify.c

…

fb_sys_fops.c

…

fbcmap.c

fbdev: zero-fill colormap in fbcmap.c

2021-05-22 10:38:17 +02:00

fbcvt.c

fbdev: fix CVT vertical front and back porch values

2015-01-27 13:35:37 +02:00

fbmem.c

fbdev: potential information leak in do_fb_ioctl()

2020-04-24 07:57:25 +02:00

fbmon.c

fbdev: Ditch fb_edid_add_monspecs

2019-11-25 15:54:25 +01:00

fbsysfs.c

fbdev: fix snprintf() limit in show_bl_curve()

2015-09-01 13:52:23 +03:00

Makefile

framebuffer: don't link fb_devio into kernel image unconditionally

2015-05-07 13:59:45 +03:00

modedb.c

fbdev: Ditch fb_edid_add_monspecs

2019-11-25 15:54:25 +01:00

svgalib.c

…

syscopyarea.c

video: fbdev: fix sys_copyarea

2015-01-30 09:46:59 +02:00

sysfillrect.c

…

sysimgblt.c

…