From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 924E223AB87; Sat, 27 Jun 2026 17:50:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782582629; cv=none; b=cPZ0ZDYffWvR1j89//b7G3Ke+p6PJA6LOmH9zp72VpGh0eVRlVcChIJAIfEoN5E4fWi7sc+/DMo4tcpiTmqrApXD6+XFYjal1ci4O9niQOH2HpWb8ihnud3l3TC8gkVok62UTBdovzzvg2lJS4f3AZ4c/gSV/f0CsFPrZOEM0yc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782582629; c=relaxed/simple; bh=b38HCn1KAyh/kKfP9bJKDcZHlr0Y8UJTU5dL2gHkFLQ=; h=Date:From:To:Subject:Message-ID:MIME-Version:Content-Type: Content-Disposition; b=pPIrxWL9eozvcDaD3MttxZeYJ1CgDHp5vlICG/ARS7chk6m7K6K8sXqrTgc4nr42KMDJNMTmK3TvSjW3HVRYGvCa3SNQwzg8B5SNtyclyuTU6PC5hNGan3VmqPH4cxUJZzv62HRTnVES5p42cJuvRS3sLoEgTgH/64POexL1GwY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=TgKDEKhw; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="TgKDEKhw" Received: by smtp.kernel.org (Postfix) with ESMTPSA id CC2991F000E9; Sat, 27 Jun 2026 17:50:26 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1782582628; bh=TcA5077Fg50GxF9pJDTFxugH2HQC+j8KYXX8dfnXUk8=; h=Date:From:To:Subject; b=TgKDEKhwZXMypoWehkfq4m2pnu9/J8xbiENBChcSGfSenc1bAfNuGmOd4InvrsUUu NEAMC3PTD0pZv0TFRiE7XuiTE2jLQtjVl73aX+F7pNNRxOaSohmF11NOP3HQxl+Mbd 8ZnCoflT3TzSe6DM8dKFWypDmtP6f4EYndGpy99C15QOXViQ6N/BMIjIy700K6qX/9 iRygKczHBzNTSarmpLKhqZ9Xk5jAmRjEtaQ7zfV4+6vCJUqZI6sGCMIQ+oCz9iZ4e3 VjUFD/VJd41k8uZSD0VNJPkhhHr7Bkqkoi+CO95sBl4n597Hx5uaeZOFsYJFz9WFqD /irQDOPbxllCg== Date: Sat, 27 Jun 2026 19:50:23 +0200 From: Helge Deller To: Linus Torvalds , linux-kernel@vger.kernel.org, linux-fbdev@vger.kernel.org, dri-devel@lists.freedesktop.org Subject: [GIT PULL] additional fbdev fixes and updates for v7.2-rc1 Message-ID: Precedence: bulk X-Mailing-List: linux-fbdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-15 Content-Disposition: inline Content-Transfer-Encoding: 8bit Hi Linus, please pull the second half of fbdev fixes for this merge window: Two patches for generic fbdev & fbcon code which fixes the handling of modelists and prevents a potential NULL ptr dereference in the console code. Five patches fix various missed cleanups in the error path of various fbdev drivers. And Uwe Kleine-König contributed one cleanup patch to use named initializers in the vga16fb driver. Thanks! Helge ---------------------------------------------------------------- The following changes since commit 4708cac0e22cfd217f48f7cec3c35e5922efcccd: Merge tag 'staging-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging (2026-06-22 12:43:16 -0700) are available in the Git repository at: http://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git tags/fbdev-for-7.2-rc1-2 for you to fetch changes up to 7f08fc10fa3d3366dc3af723970bd03d7d6d10e3: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (2026-06-26 15:12:45 +0200) ---------------------------------------------------------------- additional fbdev fixes & cleanups for 7.2-rc1: Fixes: - fbcon: fix NULL pointer dereference for a console without vc_data [Ian Bridges] - fbdev: fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var [Ian Bridges] Fixes in failure paths: - pm2fb: unwind write-cache setting on probe failure [Haoxiang Li] - goldfishfb: fail pan display on base-update timeout [Pengpeng Hou] - viafb: return error on DMA copy time-out [Pengpeng Hou] - fbcon: fix out-of-bounds read in error path of fbcon_do_set_font() [Mingyu Wang] - fbdev: fix modelist use-after-free in store_modes() [Ian Bridges] Code cleanup: - vga16fb: clean up platform_device_id table [Uwe Kleine-König] ---------------------------------------------------------------- Haoxiang Li (1): fbdev: pm2fb: unwind WC setup on probe failure Ian Bridges (3): fbdev: fix use-after-free in store_modes() fbcon: fix NULL pointer dereference for a console without vc_data fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var Mingyu Wang (1): fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Pengpeng Hou (2): fbdev: goldfishfb: fail pan display on base-update timeout fbdev: viafb: return an error when DMA copy times out Uwe Kleine-König (1): fbdev: vga16fb: Drop unused assignment of platform_device_id driver data drivers/video/fbdev/core/fbcon.c | 14 +++++++++++--- drivers/video/fbdev/core/fbmem.c | 12 ++++++++++++ drivers/video/fbdev/core/fbsysfs.c | 10 +++++++++- drivers/video/fbdev/goldfishfb.c | 13 +++++++++---- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vga16fb.c | 4 ++-- drivers/video/fbdev/via/via-core.c | 7 +++++-- 7 files changed, 49 insertions(+), 12 deletions(-)