[PATCH 3/3] video: fbdev: fix the out-of-bounds access cr_data->bak

The size of cr_data->bak is CURSOR_SIZE/4, however the access size in the is CURSOR_SIZE in the loop. It causes the out-of-bounds access. Signed-off-by: Wenjia Zhao --- drivers/video/fbdev/via/viafbdev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/video/fbdev/

[PATCH 2/3] fix the out-of-bounds access of dramsr13

Signed-off-by: Wenjia Zhao --- drivers/video/fbdev/sis/sis_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/video/fbdev/sis/sis_main.c b/drivers/video/fbdev/sis/sis_main.c index 03c736f..6774252 100644 --- a/drivers/video/fbdev/sis/sis_main.c +++ b/drivers

[PATCH] backlight: pcf50633: pdata may be a null pointer, null pointer dereference cause crash

Signed-off-by: Wenjia Zhao --- drivers/video/backlight/pcf50633-backlight.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/video/backlight/pcf50633-backlight.c b/drivers/video/backlight/pcf50633-backlight.c index 540dd338..43267af 100644 --- a/drivers/video