variable var->pixclock can be set by user. In case it equals to zero, divide by zero would occur in nvidiafb_set_par. Similar crashes have happened in other fbdev drivers. There is no check and modification on var->pixclock along the call chain to nvidia_check_var and nvidiafb_set_par. We believe it could also be triggered in driver nvidia from user site. Signed-off-by: Wei Chen <harperchen1110@gmail.com> Signed-off-by: Helge Deller <deller@gmx.de> |
||
|---|---|---|
| .. | ||
| Makefile | ||
| nv_accel.c | ||
| nv_backlight.c | ||
| nv_dma.h | ||
| nv_hw.c | ||
| nv_i2c.c | ||
| nv_local.h | ||
| nv_of.c | ||
| nv_proto.h | ||
| nv_setup.c | ||
| nv_type.h | ||
| nvidia.c | ||