Skip to content

Commit 02625c9

Browse files
anirudhrbgregkh
authored andcommitted
video: hgafb: correctly handle card detect failure during probe
The return value of hga_card_detect() is not properly handled causing the probe to succeed even though hga_card_detect() failed. Since probe succeeds, hgafb_open() can be called which will end up operating on an unmapped hga_vram. This results in an out-of-bounds access as reported by kernel test robot [1]. To fix this, correctly detect failure of hga_card_detect() by checking for a non-zero error code. [1]: https://lore.kernel.org/lkml/20210516150019.GB25903@xsang-OptiPlex-9020/ Fixes: dc13cac ("video: hgafb: fix potential NULL pointer dereference") Cc: stable <[email protected]> Reported-by: kernel test robot <[email protected]> Reviewed-by: Igor Matheus Andrade Torrente <[email protected]> Signed-off-by: Anirudh Rayabharam <[email protected]> Signed-off-by: Dan Carpenter <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Greg Kroah-Hartman <[email protected]>
1 parent d33ca7d commit 02625c9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

drivers/video/fbdev/hgafb.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -558,7 +558,7 @@ static int hgafb_probe(struct platform_device *pdev)
558558
int ret;
559559

560560
ret = hga_card_detect();
561-
if (!ret)
561+
if (ret)
562562
return ret;
563563

564564
printk(KERN_INFO "hgafb: %s with %ldK of memory detected.\n",

0 commit comments

Comments
 (0)