samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

disp: msm: add array out of bounds index check

Browse Source 
Add check for plane used as index on accessing
for bytes per pixel value.

Change-Id: I3642f9a57bf2eee7fa0dbf0965bd8497f3911e18
Signed-off-by: Prashant Singh <prasin@codeaurora.org>
This commit is contained in:
Prashant Singh
2019-06-13 17:51:14 +05:30
parent c396d0bbc1
commit 0c5e316fe9
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
msm/msm_fb.c
View File

@@ -375,11 +375,17 @@ struct drm_framebuffer *msm_framebuffer_init(struct drm_device *dev,
goto fail;
}
} else {
const struct drm_format_info *info;
info = drm_format_info(mode_cmd->pixel_format);
if (!info || num_planes > ARRAY_SIZE(info->cpp))
goto fail;
for (i = 0; i < num_planes; i++) {
unsigned int width = mode_cmd->width / (i ? hsub : 1);
unsigned int height = mode_cmd->height / (i ? vsub : 1);
unsigned int min_size;
unsigned int cpp;
unsigned int cpp = 0;
cpp = drm_format_plane_cpp(mode_cmd->pixel_format, i);