Evolution-X-Devices/kernel_realme_nemo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
bka
kernel_realme_nemo/drivers/video/fbdev
History
Sergey Shtylyov 05f6af15b8 fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() 
[ Upstream commit 3f6dae09fc8c306eb70fdfef70726e1f154e173a ]

In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000,
cvt.f_refresh will become 0 when multiplying it by 2 due to overflow. It's
then passed to fb_cvt_hperiod(), where it's used as a divider -- division
by 0 will result in kernel oops. Add a sanity check for cvt.f_refresh to
avoid such overflow...

Found by Linux Verification Center (linuxtesting.org) with the Svace static
analysis tool.

Fixes: 96fe6a2109 ("[PATCH] fbdev: Add VESA Coordinated Video Timings (CVT) support")
Signed-off-by: Sergey Shtylyov <s.shtylyov@omp.ru>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>
2025-12-24 11:24:00 +00:00
..
aty
fbdev: atyfb: only use ioremap_uc() on i386 and ia64
2023-11-08 11:21:09 +01:00
core
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
2025-12-24 11:24:00 +00:00
geode
fbdev: lxfb: Fix potential divide by zero
2023-04-05 11:14:20 +02:00
i810
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
intelfb
fbdev: intelfb: Fix potential divide by zero
2023-04-05 11:14:20 +02:00
kyro
video: fbdev: kyro: Error out if 'pixclock' equals zero
2021-09-22 11:45:28 +02:00
matrox
treewide: Remove uninitialized_var() usage
2023-08-11 11:33:32 +02:00
mb862xx
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mbx
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
mmp
fbdev: mmp: fix value check in mmphw_probe()
2023-08-30 16:35:11 +02:00
nvidia
fbdev: nvidia: Fix potential divide by zero
2023-04-05 11:14:19 +02:00
omap
fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
2023-08-11 11:33:37 +02:00
omap2
fbdev: omapfb: Add 'plane' value check
2025-12-24 11:23:33 +00:00
riva
treewide: Remove uninitialized_var() usage
2023-08-11 11:33:32 +02:00
savage
fbdev: savage: Handle err return when savagefb_check_var failed
2025-12-24 11:20:37 +00:00
sis
fbdev: sisfb: Fix strbuf array overflow
2025-12-24 11:22:04 +00:00
vermilion
fbdev: vermilion: decrease reference count in error path
2023-01-18 09:26:26 +01:00
via
fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
2025-12-24 11:20:08 +00:00
68328fb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
acornfb.c
…
acornfb.h
…
amba-clcd-nomadik.c
…
amba-clcd-nomadik.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amba-clcd-versatile.c
…
amba-clcd-versatile.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
amba-clcd.c
video: fbdev: amba-clcd: Fix refcount leak bugs
2022-08-25 11:11:25 +02:00
amifb.c
…
arcfb.c
…
arkfb.c
video: fbdev: arkfb: Check the size of screen before memset_io()
2022-08-25 11:11:27 +02:00
asiliantfb.c
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
2021-09-22 11:45:28 +02:00
atafb_iplan2p2.c
…
atafb_iplan2p4.c
…
atafb_iplan2p8.c
…
atafb_mfb.c
…
atafb_utils.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atafb.c
video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
2022-04-20 09:08:11 +02:00
atafb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atmel_lcdfb.c
video: fbdev: atmel_lcdfb: fix display-timings lookup
2018-02-22 15:42:27 +01:00
au1100fb.c
fbdev: au1100fb: Move a variable assignment behind a null pointer check
2025-12-24 11:23:26 +00:00
au1100fb.h
…
au1200fb.c
fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
2023-08-11 11:33:49 +02:00
au1200fb.h
…
auo_k190x.c
…
auo_k190x.h
…
auo_k1900fb.c
…
auo_k1901fb.c
…
bf54x-lq043fb.c
…
bf537-lq035.c
…
bfin_adv7393fb.c
…
bfin_adv7393fb.h
…
bfin-lq035q1-fb.c
video: bfin-lq035q1-fb: constify dev_pm_ops
2017-08-01 17:20:40 +02:00
bfin-t350mcqb-fb.c
…
broadsheetfb.c
…
bt431.h
…
bt455.h
…
bw2.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
c2p_core.h
…
c2p_iplan2.c
…
c2p_planar.c
…
c2p.h
…
carminefb_regs.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
carminefb.c
…
carminefb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
cg3.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
cg6.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
cg14.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
chipsfb.c
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
2022-09-15 12:23:52 +02:00
cirrusfb.c
video: fbdev: cirrusfb: check pixclock to avoid divide by zero
2022-04-20 09:08:22 +02:00
clps711x-fb.c
video: clps711x-fb: release disp device node in probe()
2019-02-12 19:46:06 +01:00
clps711xfb.c
…
cobalt_lcdfb.c
video: cobalt_lcdfb: constify fb_fix_screeninfo structure
2017-08-01 17:20:39 +02:00
controlfb.c
…
controlfb.h
fbdev: controlfb: Add missing modes to fix out of bounds access
2017-12-20 10:10:23 +01:00
cyber2000fb.c
video: fbdev: make fb_videomode const
2017-09-04 16:00:49 +02:00
cyber2000fb.h
…
da8xx-fb.c
fbdev: da8xx-fb: Drop unnecessary static
2017-08-01 17:20:39 +02:00
dnfb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
edid.h
…
efifb.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ep93xx-fb.c
fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
2023-09-23 10:47:01 +02:00
fb-puv3.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
ffb.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
fm2fb.c
video: fm2fb: constify zorro_device_id
2017-09-04 16:00:49 +02:00
fsl-diu-fb.c
fbdev: fsl-diu-fb: add missing device_remove_file()
2025-12-24 11:23:47 +00:00
g364fb.c
…
gbefb.c
…
goldfishfb.c
video: fbdev: Set pixclock = 0 in goldfishfb
2019-04-03 06:25:07 +02:00
grvga.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
gxt4500.c
…
hecubafb.c
…
hgafb.c
video: hgafb: correctly handle card detect failure during probe
2021-05-26 11:47:01 +02:00
hitfb.c
…
hpfb.c
fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
2025-12-24 11:21:48 +00:00
hyperv_fb.c
video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
2021-01-12 20:09:09 +01:00
i740_reg.h
…
i740fb.c
video: fbdev: i740fb: Check the argument of i740_calc_vclk()
2022-08-25 11:11:37 +02:00
igafb.c
…
imsttfb.c
fbdev: imsttfb: Fix use after free bug in imsttfb_probe
2023-08-11 11:33:32 +02:00
imxfb.c
fbdev: imxfb: warn about invalid left/right margin
2023-08-11 11:33:49 +02:00
jz4740_fb.c
…
Kconfig
fbdev: sh7760fb: allow modular build
2025-12-24 11:20:29 +00:00
leo.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
macfb.c
…
macmodes.c
…
macmodes.h
…
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
maxinefb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
metronomefb.c
…
mx3fb.c
…
mxsfb.c
…
n411.c
…
neofb.c
video: fbdev: neofb: fix memory leak in neo_scan_monitor()
2020-08-21 09:48:04 +02:00
nuc900fb.c
…
nuc900fb.h
…
ocfb.c
…
offb.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
p9100.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
platinumfb.c
…
platinumfb.h
…
pm2fb.c
fbdev: pm2fb: fix missing pci_disable_device()
2023-01-18 09:26:25 +01:00
pm3fb.c
treewide: Remove uninitialized_var() usage
2023-08-11 11:33:32 +02:00
pmag-aa-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
pmag-ba-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
pmagb-b-fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
ps3fb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
pvr2fb.c
video: fbdev: pvr2fb: initialize variables
2020-11-05 11:06:54 +01:00
pxa3xx-gcu.c
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
2022-09-28 10:56:49 +02:00
pxa3xx-gcu.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pxa168fb.c
pxa168fb: Fix the function used to release some memory in an error handling path
2020-02-28 16:35:56 +01:00
pxa168fb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
pxafb.c
fbdev: pxafb: Fix possible use after free in pxafb_task()
2025-12-24 11:21:58 +00:00
pxafb.h
…
q40fb.c
video: fbdev: make fb_var_screeninfo const
2017-09-04 16:00:50 +02:00
s1d13xxxfb.c
…
s3c2410fb.c
…
s3c2410fb.h
…
s3c-fb.c
…
s3fb.c
video: fbdev: s3fb: Check the size of screen before memset_io()
2022-08-25 11:11:27 +02:00
sa1100fb.c
…
sa1100fb.h
…
sbuslib.c
fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper()
2019-11-24 08:23:21 +01:00
sbuslib.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sh7760fb.c
fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
2025-12-24 11:22:22 +00:00
sh_mobile_lcdcfb.c
fbdev: shmobile: fix snprintf truncation
2025-12-24 11:20:28 +00:00
sh_mobile_lcdcfb.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
sh_mobile_meram.c
…
simplefb.c
…
skeletonfb.c
video: fbdev: annotate fb_fix_screeninfo with const and __initconst
2017-09-04 16:00:49 +02:00
sm501fb.c
fbdev: sm501fb: Add some geometry checks.
2025-12-24 11:23:27 +00:00
sm712.h
fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
2019-05-25 18:25:29 +02:00
sm712fb.c
video: fbdev: sm712fb: Fix crash in smtcfb_write()
2022-04-20 09:08:23 +02:00
smscufx.c
fbdev: smscufx: Fix several use-after-free bugs
2022-11-03 23:50:53 +09:00
ssd1307fb.c
video: ssd1307fb: Start page range at page_offset
2019-10-07 18:54:58 +02:00
sstfb.c
…
sticore.h
fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
2025-12-24 11:17:43 +00:00
stifb.c
fbdev: stifb: Fix info entry in sti_struct on error path
2023-06-09 10:22:49 +02:00
sunxvr500.c
video: fbdev: sunxvr500: constify pci_device_id.
2017-08-01 17:20:43 +02:00
sunxvr1000.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
sunxvr2500.c
video: fbdev: sunxvr2500: constify pci_device_id.
2017-08-01 17:20:41 +02:00
tcx.c
video: fbdev: Convert to using %pOF instead of full_name
2017-08-07 17:22:13 +02:00
tdfxfb.c
video: fbdev: tdfx: constify pci_device_id.
2017-08-01 17:20:43 +02:00
tgafb.c
fbdev: tgafb: Fix potential divide by zero
2023-04-05 11:14:19 +02:00
tmiofb.c
…
tridentfb.c
video: fbdev: tridentfb: constify pci_device_id.
2017-08-01 17:20:41 +02:00
udlfb.c
video: udlfb: Fix read EDID timeout
2017-12-20 10:10:23 +01:00
uvesafb.c
fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
2023-11-08 11:21:09 +01:00
valkyriefb.c
…
valkyriefb.h
…
vesafb.c
…
vfb.c
vfb: fix video mode and line_length being set when loaded
2018-04-12 12:32:15 +02:00
vga16fb.c
video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
2020-10-29 09:07:05 +01:00
vt8500lcdfb.c
…
vt8500lcdfb.h
…
vt8623fb.c
video: fbdev: vt8623fb: Check the size of screen before memset_io()
2022-08-25 11:11:27 +02:00
w100fb.c
video: fbdev: w100fb: Reset global state
2022-04-20 09:08:22 +02:00
w100fb.h
…
wm8505fb_regs.h
…
wm8505fb.c
…
wmt_ge_rops.c
…
wmt_ge_rops.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
xen-fbfront.c
…
xilinxfb.c
video: fbdev: Fix multiple style issues in xilinxfb
2017-08-21 16:49:57 +02:00