Shigeru Yoshida a5a923038d fbdev: fbcon: Properly revert changes when vc_resize() failed ... fbcon_do_set_font() calls vc_resize() when font size is changed. However, if if vc_resize() failed, current implementation doesn't revert changes for font size, and this causes inconsistent state. syzbot reported unable to handle page fault due to this issue [1]. syzbot's repro uses fault injection which cause failure for memory allocation, so vc_resize() failed. This patch fixes this issue by properly revert changes for font related date when vc_resize() failed. Link: https://syzkaller.appspot.com/bug?id=3443d3a1fa6d964dd7310a0cb1696d165a3e07c4 [1] Reported-by: syzbot+a168dbeaaa7778273c1b@syzkaller.appspotmail.com Signed-off-by: Shigeru Yoshida <syoshida@redhat.com> Signed-off-by: Helge Deller <deller@gmx.de> CC: stable@vger.kernel.org # 5.15+		2022-08-26 19:56:18 +02:00
..
aty	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
core	fbdev: fbcon: Properly revert changes when vc_resize() failed	2022-08-26 19:56:18 +02:00
geode	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
i810
intelfb	video: fbdev: intelfb: Initialize value of stolen size	2022-06-20 14:33:05 +02:00
kyro	video: fbdev: kyro: Error out if 'lineclock' equals zero	2022-04-11 08:23:49 +02:00
matrox	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
mb862xx	video: fbdev: aty/matrox/...: Prepare cleanup of powerpc's asm/prom.h	2022-04-04 08:55:23 +02:00
mmp	video: fbdev: mmp: replace usage of found with dedicated list iterator variable	2022-04-12 22:06:10 +02:00
nvidia	video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow	2022-01-29 22:24:25 +01:00
omap	fbdev: omap: Remove unnecessary print function dev_err()	2022-08-24 21:53:41 +02:00
omap2	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
riva	video: fbdev: riva: Error out if 'pixclock' equals zero	2021-07-26 20:06:03 +02:00
savage	video: fbdev: savagefb: make a variable local	2022-01-30 19:37:03 +01:00
sis	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
vermilion
via	video: fbdev: via: check the return value of kstrdup()	2022-02-22 09:00:09 +01:00
68328fb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
acornfb.c
acornfb.h
amba-clcd.c	video: fbdev: amba-clcd: Fix refcount leak bugs	2022-07-26 08:56:22 +02:00
amifb.c	video: fbdev: amiga: Simplify amifb_pan_display()	2022-07-18 07:54:17 +02:00
arcfb.c	video: fbdev: arcfb: remove redundant initialization of variable err	2021-07-21 13:09:21 +02:00
arkfb.c	video: fbdev: arkfb: Check the size of screen before memset_io()	2022-08-05 18:44:15 +02:00
asiliantfb.c	video: fbdev: asiliantfb: remove redundant assignment to variable Ftarget	2022-01-29 23:04:57 +01:00
atafb.c	video: fbdev: atari: Remove backward bug-compatibility	2022-07-18 07:56:18 +02:00
atafb.h
atafb_iplan2p2.c
atafb_iplan2p4.c
atafb_iplan2p8.c
atafb_mfb.c
atafb_utils.h
atmel_lcdfb.c	video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()	2022-01-30 19:38:35 +01:00
au1100fb.c	video: fbdev: au1100fb: Drop unnecessary NULL ptr check	2022-06-20 20:19:50 +02:00
au1100fb.h	video: fbdev: au1100fb: Spelling s/palette/palette/	2022-02-16 10:54:42 +01:00
au1200fb.c	video: fbdev: au1200fb: Make use of dma_mmap_coherent()	2022-01-29 22:24:25 +01:00
au1200fb.h
broadsheetfb.c	fbdev: Use pageref offset for deferred-I/O writeback	2022-05-03 16:04:22 +02:00
bt431.h
bt455.h
bw2.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
c2p.h
c2p_core.h
c2p_iplan2.c
c2p_planar.c
carminefb.c
carminefb.h
carminefb_regs.h
cg3.c
cg6.c
cg14.c
chipsfb.c	fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()	2022-08-24 21:47:09 +02:00
cirrusfb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
clps711x-fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
cobalt_lcdfb.c
controlfb.c	video: fbdev: aty/matrox/...: Prepare cleanup of powerpc's asm/prom.h	2022-04-04 08:55:23 +02:00
controlfb.h
cyber2000fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
cyber2000fb.h
da8xx-fb.c	video: fbdev: da8xx-fb: Make use of the helper function dev_err_probe()	2022-01-29 23:22:36 +01:00
dnfb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
edid.h
efifb.c	Merge drm/drm-next into drm-misc-next	2022-06-20 18:21:25 +02:00
ep93xx-fb.c	video: ep93xx: Prepare clock before using it	2021-07-26 22:10:29 +02:00
ffb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
fm2fb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
fsl-diu-fb.c
g364fb.c
gbefb.c	video: fbdev: gbefb: Only instantiate device when built for IP32	2021-10-06 11:12:28 +02:00
goldfishfb.c
grvga.c
gxt4500.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
hecubafb.c	fbdev: Rename pagelist to pagereflist for deferred I/O	2022-05-03 16:04:22 +02:00
hgafb.c	video: hgafb: correctly handle card detect failure during probe	2021-05-21 15:04:05 +02:00
hitfb.c
hpfb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
hyperv_fb.c	fbdev fixes and updates for kernel v5.19-rc1	2022-05-30 12:46:49 -07:00
i740_reg.h
i740fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
imsttfb.c	video: imsttfb: check for ioremap() failures	2021-05-13 18:58:39 +02:00
imxfb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
Kconfig	drm: Implement DRM aperture helpers under video/	2022-06-27 11:07:55 +02:00
leo.c
macfb.c
macmodes.c
macmodes.h
Makefile	ARM: omap1: move lcd_dma code into omapfb driver	2022-04-21 15:00:45 +02:00
maxinefb.c
metronomefb.c	fbdev: Use pageref offset for deferred-I/O writeback	2022-05-03 16:04:22 +02:00
mx3fb.c	dmaengine: imx: Move header to include/dma/	2022-04-19 12:06:18 +01:00
n411.c
neofb.c	video: fbdev: neofb: Fix the check of 'var->pixclock'	2022-04-11 08:23:49 +02:00
ocfb.c	video: fbdev: ocfb: add const to of_device_id	2022-01-29 22:24:25 +01:00
offb.c	video: fbdev: offb: Include missing linux/platform_device.h	2022-07-28 16:22:12 +10:00
p9100.c
platinumfb.c	video: fbdev: aty/matrox/...: Prepare cleanup of powerpc's asm/prom.h	2022-04-04 08:55:23 +02:00
platinumfb.h
pm2fb.c	fbdev: fb_pm2fb: Avoid potential divide by zero error	2022-08-24 21:47:08 +02:00
pm3fb.c
pmag-aa-fb.c
pmag-ba-fb.c
pmagb-b-fb.c
ps3fb.c
pvr2fb.c
pxa3xx-gcu.c	video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write	2022-06-20 20:12:17 +02:00
pxa3xx-gcu.h
pxa3xx-regs.h	ARM: pxa: move regs-lcd.h into driver	2022-04-19 16:29:03 +02:00
pxa168fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
pxa168fb.h
pxafb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
pxafb.h
q40fb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
s1d13xxxfb.c
s3c-fb.c	drm for 5.18-rc1	2022-03-24 16:19:43 -07:00
s3c2410fb-regs-lcd.h
s3c2410fb.c
s3c2410fb.h
s3fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
sa1100fb.c	video: fbdev: sa1100fb: Remove unused sa1100fb_setup()	2022-07-18 07:54:18 +02:00
sa1100fb.h
sbuslib.c
sbuslib.h
sh7760fb.c
sh_mobile_lcdcfb.c	fbdev: Use pageref offset for deferred-I/O writeback	2022-05-03 16:04:22 +02:00
sh_mobile_lcdcfb.h
simplefb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
skeletonfb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
sm501fb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
sm712.h
sm712fb.c	video: fbdev: sm712fb: Fix crash in smtcfb_write()	2022-03-03 11:13:40 +01:00
smscufx.c	fbdev: Use pageref offset for deferred-I/O writeback	2022-05-03 16:04:22 +02:00
ssd1307fb.c	fbdev: ssd1307fb: Fix repeated words in comments	2022-08-24 21:47:08 +02:00
sstfb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
sticore.h	parisc/stifb: Keep track of hardware path of graphics card	2022-06-04 15:47:03 +02:00
stifb.c	parisc/stifb: Implement fb_is_primary_device()	2022-06-04 15:47:03 +02:00
sunxvr500.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
sunxvr1000.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
sunxvr2500.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
tcx.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
tdfxfb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
tgafb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
tmiofb.c
tridentfb.c	fbdev: Move fbdev drivers from strlcpy to strscpy	2022-08-24 22:06:15 +02:00
udlfb.c	fbdev: Use pageref offset for deferred-I/O writeback	2022-05-03 16:04:22 +02:00
uvesafb.c
valkyriefb.c	video: fbdev: Make *fb_setup() and *fb_init() static	2022-07-18 07:54:20 +02:00
valkyriefb.h
vesafb.c	video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup	2022-05-28 19:26:56 +02:00
vfb.c
vga16fb.c	drm-misc-next for v5.18:	2022-02-01 19:02:41 +10:00
vt8500lcdfb.c
vt8500lcdfb.h
vt8623fb.c	video: fbdev: vt8623fb: Check the size of screen before memset_io()	2022-08-05 18:44:14 +02:00
w100fb.c	video: fbdev: w100fb: Reset global state	2022-01-29 22:24:26 +01:00
w100fb.h
wm8505fb.c
wm8505fb_regs.h
wmt_ge_rops.c
wmt_ge_rops.h
xen-fbfront.c	fbdev fixes and updates for kernel v5.19-rc1	2022-05-30 12:46:49 -07:00
xilinxfb.c	video: fbdev: Fix fall-through warning for Clang	2021-07-13 13:58:29 -05:00