linux-kernel - Re: [PATCH 1/1] fbdev: atyfb: Fix buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Z-wTxsV9C9MzoXl9@intel.com>
Date: Tue, 1 Apr 2025 19:26:46 +0300
From: Ville Syrjälä <ville.syrjala@...ux.intel.com>
To: Denis Arefev <arefev@...mel.ru>
Cc: deller@....de, dri-devel@...ts.freedesktop.org, jani.nikula@...el.com,
	linux-fbdev@...r.kernel.org, linux-kernel@...r.kernel.org,
	lvc-project@...uxtesting.org, tzimmermann@...e.de
Subject: Re: [PATCH 1/1] fbdev: atyfb: Fix buffer overflow

On Tue, Apr 01, 2025 at 01:23:30PM +0300, Denis Arefev wrote:
> > It's old, but still runs in some configurations and people
> > still (although probably not on daily bases) use it.
> > Also don't forget about the various old non-x86 hardware machines
> > which often used ATI cards too, and those machines are still
> > supported by Linux as well.
> 
> Hi Helge.
> Thanks for the reply.
> 
>  Ok. Everyone agrees that there is an error (buffer overflow 
> lt_lcd_regs[LCD_MISC_CNTL]).

As I said, that will never happen.

>  Ok. Everyone agrees that this code is still needed.
> 
> Then I propose to fix this error.  :)
> 
> Unfortunately, I can't do everything by the rules, I didn't save
> the chip datasheet. (I didn't think I would ever need it again.). 
> 
> Regards Denis.

-- 
Ville Syrjälä
Intel