Raghavendra Ambadas
b19e63b9b6
msm: mdp3: fix the use after free problem
...
currently the fdget is failed and freed in mdp3_get_img,
and again same is freed in mdp3_put_img function.
This can cause a use after free issue.
Change-Id: Ic2ad97a201d36b2bb49d3fdc93bb19ce089b6cb4
Signed-off-by: Raghavendra Ambadas <quic_c_rambad@quicinc.com>
Signed-off-by: srikanthreddy ponogoti <quic_sponogot@quicinc.com>
2025-02-14 15:30:55 +02:00
..
aty
mach64: fix image corruption due to reading accelerator registers
2018-11-21 09:26:00 +01:00
core
Merge remote-tracking branch 'common/android-4.9-q' into android12-4.9-sdm845
2022-06-12 01:39:01 +03:00
geode
x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
2018-02-22 15:43:55 +01:00
i810
intelfb
kyro
video: fbdev: kyro: Error out if 'pixclock' equals zero
2021-09-22 11:43:05 +02:00
matrox
mb862xx
mbx
mmp
video: fbdev/mmp: add MODULE_LICENSE
2018-02-25 11:05:44 +01:00
msm
msm: mdp3: fix the use after free problem
2025-02-14 15:30:55 +02:00
nvidia
video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
2022-04-20 09:06:38 +02:00
omap
fbdev: omapfb: off by one in omapfb_register_client()
2018-09-26 08:36:32 +02:00
omap2
video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
2022-04-20 09:06:39 +02:00
riva
video: fbdev: riva: Error out if 'pixclock' equals zero
2021-09-22 11:43:05 +02:00
savage
sis
video: fbdev: sis: fix null ptr dereference
2020-10-29 09:05:35 +01:00
vermilion
fbdev: vermilion: decrease reference count in error path
2023-01-07 12:07:27 +01:00
via
fbdev: via: Fix error in via_core_init()
2023-01-07 12:07:27 +01:00
68328fb.c
acornfb.c
acornfb.h
amba-clcd-nomadik.c
amba-clcd-nomadik.h
amba-clcd-versatile.c
amba-clcd-versatile.h
amba-clcd.c
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
2022-06-14 16:52:34 +02:00
amifb.c
arcfb.c
arkfb.c
asiliantfb.c
video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
2021-09-22 11:43:05 +02:00
atafb.c
video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
2022-04-20 09:06:30 +02:00
atafb.h
atafb_iplan2p2.c
atafb_iplan2p4.c
atafb_iplan2p8.c
atafb_mfb.c
atafb_utils.h
atmel_lcdfb.c
video: fbdev: atmel_lcdfb: fix display-timings lookup
2018-02-22 15:43:49 +01:00
au1100fb.c
au1100fb.h
au1200fb.c
video: fbdev: au1200fb: Return an error code if a memory allocation fails
2017-12-20 10:07:27 +01:00
au1200fb.h
auo_k190x.c
auo_k190x.h
auo_k1900fb.c
auo_k1901fb.c
bf54x-lq043fb.c
bf537-lq035.c
bfin-lq035q1-fb.c
bfin-t350mcqb-fb.c
bfin_adv7393fb.c
bfin_adv7393fb.h
broadsheetfb.c
bt431.h
bt455.h
bw2.c
c2p.h
c2p_core.h
c2p_iplan2.c
c2p_planar.c
carminefb.c
carminefb.h
carminefb_regs.h
cg3.c
cg6.c
cg14.c
chipsfb.c
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
2022-09-15 12:39:46 +02:00
cirrusfb.c
video: fbdev: cirrusfb: check pixclock to avoid divide by zero
2022-04-20 09:06:39 +02:00
clps711x-fb.c
video: clps711x-fb: release disp device node in probe()
2019-02-12 19:44:56 +01:00
clps711xfb.c
cobalt_lcdfb.c
controlfb.c
controlfb.h
fbdev: controlfb: Add missing modes to fix out of bounds access
2017-12-20 10:07:27 +01:00
cyber2000fb.c
cyber2000fb.h
da8xx-fb.c
dnfb.c
edid.h
efifb.c
efi/fb: Correct PCI_STD_RESOURCE_END usage
2018-11-10 07:42:45 -08:00
ep93xx-fb.c
fb-puv3.c
ffb.c
fm2fb.c
fsl-diu-fb.c
g364fb.c
gbefb.c
goldfishfb.c
video: fbdev: Set pixclock = 0 in goldfishfb
2019-04-03 06:24:14 +02:00
grvga.c
gxt4500.c
hecubafb.c
hgafb.c
video: hgafb: correctly handle card detect failure during probe
2021-05-26 11:29:09 +02:00
hitfb.c
hpfb.c
hyperv_fb.c
video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
2021-01-12 19:49:03 +01:00
i740_reg.h
i740fb.c
video: fbdev: i740fb: Check the argument of i740_calc_vclk()
2022-08-25 11:09:32 +02:00
igafb.c
imsttfb.c
Revert "video: imsttfb: fix potential NULL pointer dereferences"
2021-05-26 11:29:07 +02:00
imxfb.c
jz4740_fb.c
Kconfig
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-20
2023-01-19 15:42:12 +01:00
leo.c
macfb.c
macmodes.c
macmodes.h
Makefile
fbdev: msm: enable compilation of fb driver
2018-02-01 00:03:13 -08:00
maxinefb.c
metronomefb.c
mx3fb.c
mxsfb.c
n411.c
neofb.c
video: fbdev: neofb: fix memory leak in neo_scan_monitor()
2020-08-21 11:01:58 +02:00
nuc900fb.c
nuc900fb.h
ocfb.c
offb.c
p9100.c
platinumfb.c
platinumfb.h
pm2fb.c
fbdev: pm2fb: fix missing pci_disable_device()
2023-01-07 12:07:27 +01:00
pm3fb.c
pmag-aa-fb.c
pmag-ba-fb.c
video: fbdev: pmag-ba-fb: Remove bad `__init' annotation
2017-11-15 15:53:11 +01:00
pmagb-b-fb.c
ps3fb.c
pvr2fb.c
video: fbdev: pvr2fb: initialize variables
2020-11-10 10:23:53 +01:00
pxa3xx-gcu.c
video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
2022-09-28 10:55:44 +02:00
pxa3xx-gcu.h
pxa168fb.c
pxa168fb: Fix the function used to release some memory in an error handling path
2020-02-28 15:42:17 +01:00
pxa168fb.h
pxafb.c
video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
2020-08-21 11:02:00 +02:00
pxafb.h
q40fb.c
s1d13xxxfb.c
s3c-fb.c
s3c2410fb.c
s3c2410fb.h
s3fb.c
sa1100fb.c
sa1100fb.h
sbuslib.c
fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper()
2019-11-25 09:53:41 +01:00
sbuslib.h
sh7760fb.c
sh_mobile_lcdcfb.c
sh_mobile_lcdcfb.h
sh_mobile_meram.c
simplefb.c
skeletonfb.c
sm501fb.c
sm501fb: don't return zero on failure path in sm501fb_start()
2018-03-24 11:00:21 +01:00
sm712.h
fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
2019-05-25 18:26:52 +02:00
sm712fb.c
video: fbdev: sm712fb: Fix crash in smtcfb_write()
2022-04-20 09:06:40 +02:00
smscufx.c
fbdev: smscufx: Fix several use-after-free bugs
2022-11-03 23:49:16 +09:00
ssd1307fb.c
video: ssd1307fb: Start page range at page_offset
2019-10-07 18:53:09 +02:00
sstfb.c
sticore.h
stifb.c
parisc: fbdev/stifb: Align graphics memory size to 4MB
2022-10-26 13:15:37 +02:00
sunxvr500.c
sunxvr1000.c
sunxvr2500.c
tcx.c
tdfxfb.c
tgafb.c
tmiofb.c
tridentfb.c
udlfb.c
video: fbdev: udlfb: Fix buffer on stack
2018-03-24 11:00:21 +01:00
uvesafb.c
fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
2023-01-07 12:07:27 +01:00
valkyriefb.c
valkyriefb.h
vesafb.c
vfb.c
Merge android-4.9.94 ( 8683408) into msm-4.9
2018-05-11 03:07:46 -07:00
vga16fb.c
video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
2020-10-29 09:05:35 +01:00
vt8500lcdfb.c
vt8500lcdfb.h
vt8623fb.c
w100fb.c
video: fbdev: w100fb: Reset global state
2022-04-20 09:06:39 +02:00
w100fb.h
wm8505fb.c
wm8505fb_regs.h
wmt_ge_rops.c
wmt_ge_rops.h
xen-fbfront.c
xilinxfb.c