Re: [PATCH] vt: Reject zero-sized screen buffer size.

2020-07-10 Thread Greg Kroah-Hartman
On Fri, Jul 10, 2020 at 08:31:42PM +0900, Tetsuo Handa wrote: > On 2020/07/10 19:55, Greg Kroah-Hartman wrote: > >> diff --git a/drivers/tty/vt/vt.c b/drivers/tty/vt/vt.c > >> index 48a8199f7845..8497e9206607 100644 > >> --- a/drivers/tty/vt/vt.c > >> +++ b/drivers/tty/vt/vt.c > >> @@ -1126,7 +1126

Re: [PATCH] vt: Reject zero-sized screen buffer size.

2020-07-10 Thread Tetsuo Handa
On 2020/07/10 19:55, Greg Kroah-Hartman wrote: >> diff --git a/drivers/tty/vt/vt.c b/drivers/tty/vt/vt.c >> index 48a8199f7845..8497e9206607 100644 >> --- a/drivers/tty/vt/vt.c >> +++ b/drivers/tty/vt/vt.c >> @@ -1126,7 +1126,7 @@ int vc_allocate(unsigned int currcons) /* return 0 on >> success */

Re: [PATCH] vt: Reject zero-sized screen buffer size.

2020-07-10 Thread Greg Kroah-Hartman
On Fri, Jul 10, 2020 at 02:53:29PM +0900, Tetsuo Handa wrote: > syzbot is reporting general protection fault in do_con_write() [1] caused > by vc->vc_screenbuf == ZERO_SIZE_PTR caused by vc->vc_screenbuf_size == 0 > caused by vc->vc_cols == vc->vc_rows == vc->vc_size_row == 0 being passed > to ioct

[PATCH] vt: Reject zero-sized screen buffer size.

2020-07-09 Thread Tetsuo Handa
syzbot is reporting general protection fault in do_con_write() [1] caused by vc->vc_screenbuf == ZERO_SIZE_PTR caused by vc->vc_screenbuf_size == 0 caused by vc->vc_cols == vc->vc_rows == vc->vc_size_row == 0 being passed to ioctl(FBIOPUT_VSCREENINFO) request on /dev/fb0 , for gotoxy(vc, 0, 0) fro