From mboxrd@z Thu Jan 1 00:00:00 1970 From: Anatolij Gustschin Date: Sat, 18 Aug 2012 18:35:07 +0000 Subject: Re: [patch] video: mb862xxfb: prevent divide by zero bug Message-Id: <20120818203507.558ccf09@wker> List-Id: References: <20120818155541.GB22424@elgon.mountain> In-Reply-To: <20120818155541.GB22424-mgFCXtclrQlZLf2FXnZxJA@public.gmane.org> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Dan Carpenter Cc: linux-fbdev-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, H Hartley Sweeten , devicetree-discuss-uLR06cmDAlY/bJ5BZ2RsiQ@public.gmane.org, Florian Tobias Schandinat , kernel-janitors-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Rob Herring , Paul Gortmaker , Laurent Pinchart , David Brown On Sat, 18 Aug 2012 18:55:41 +0300 Dan Carpenter wrote: > Do a sanity check on these before using them as divisors. > > Signed-off-by: Dan Carpenter Acked-by: Anatolij Gustschin > diff --git a/drivers/video/mb862xx/mb862xxfbdrv.c b/drivers/video/mb862xx/mb862xxfbdrv.c > index 00ce1f3..57d940b 100644 > --- a/drivers/video/mb862xx/mb862xxfbdrv.c > +++ b/drivers/video/mb862xx/mb862xxfbdrv.c > @@ -328,6 +328,8 @@ static int mb862xxfb_ioctl(struct fb_info *fbi, unsigned int cmd, > case MB862XX_L1_SET_CFG: > if (copy_from_user(l1_cfg, argp, sizeof(*l1_cfg))) > return -EFAULT; > + if (l1_cfg->dh = 0 || l1_cfg->dw = 0) > + return -EINVAL; > if ((l1_cfg->sw >= l1_cfg->dw) && (l1_cfg->sh >= l1_cfg->dh)) { > /* downscaling */ > outreg(cap, GC_CAP_CSC, Thanks, Anatolij