diff options
| author | Deepanshu Kartikey <kartikey406@gmail.com> | 2026-08-16 14:22:34 +0530 |
|---|---|---|
| committer | Ruben Wauters <rubenru09@aol.com> | 2026-08-23 16:36:36 +0100 |
| commit | 500cb24cd61bad8a2747ddfc49b7034899c82d94 (patch) | |
| tree | 9ecf78759f8042b9249f8a27600088734587b290 /include | |
| parent | 511585987d27d8cb668acebd399fc4deda23404c (diff) | |
| download | linux-500cb24cd61bad8a2747ddfc49b7034899c82d94.tar.gz linux-500cb24cd61bad8a2747ddfc49b7034899c82d94.zip | |
drm/gud: NUL-terminate TV mode names read from the device
gud_connector_add_tv_mode() reads a buffer of fixed-size mode names from
the USB device and passes pointers into it to
drm_mode_create_tv_properties_legacy(), which calls strlen() on each one.
Nothing guarantees the device NUL-terminates a name, so strlen() can run
past the end of a slot and, for the last mode, past the end of the
allocation.
Terminate each name at the end of its slot before use.
Fixes: 40e1a70b4aed ("drm: Add GUD USB Display driver")
Reported-by: syzbot+916c888ba5f1a54c9526@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=916c888ba5f1a54c9526
Tested-by: syzbot+916c888ba5f1a54c9526@syzkaller.appspotmail.com
Signed-off-by: Deepanshu Kartikey <kartikey406@gmail.com>
Acked-by: Ruben Wauters <rubenru09@aol.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Ruben Wauters <rubenru09@aol.com>
Link: https://patch.msgid.link/20260816085234.22053-1-kartikey406@gmail.com
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions