mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
synced 2026-11-06 18:57:23 +00:00
4d098000ac
There are conditions, albeit somewhat unlikely, under which right hand
expressions, calculating the end of time period in functions like
repaper_frame_fixed_repeat(), may overflow.
For instance, if 'factor10x' in repaper_get_temperature() is high
enough (170), as is 'epd->stage_time' in repaper_probe(), then the
resulting value of 'end' will not fit in unsigned int expression.
Mitigate this by casting 'epd->factored_stage_time' to wider type before
any multiplication is done.
Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.
Fixes:
|
History
|
|
|---|---|---|
| .. | ||
| arcpgu.c | ||
| bochs.c | ||
| cirrus-qemu.c | ||
| gm12u320.c | ||
| hx8357d.c | ||
| ili9163.c | ||
| ili9225.c | ||
| ili9341.c | ||
| ili9486.c | ||
| Kconfig | ||
| Makefile | ||
| mi0283qt.c | ||
| ofdrm.c | ||
| panel-mipi-dbi.c | ||
| repaper.c | ||
| sharp-memory.c | ||
| simpledrm.c | ||
| st7586.c | ||
| st7735r.c | ||