]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 16 Sep 2021 13:29:19 +0000 (16:29 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 8 Apr 2022 11:57:44 +0000 (13:57 +0200)
commita9e1c8d2e0f91d845c2b38e2cd0b90ff9550ea74
treee4a9a64feecbb72b48f0057486a3e9c47dd6bbb0
parentc19c5424ec7a04097949bdad9b7b6ad470c612d6
video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()

[ Upstream commit 78482af095abd9f4f29f1aa3fe575d25c6ae3028 ]

This code has two bugs:
1) "cnt" is 255 but the size of the buffer is 256 so the last byte is
   not used.
2) If we try to print more than 255 characters then "cnt" will be
   negative and that will trigger a WARN() in snprintf(). The fix for
   this is to use scnprintf() instead of snprintf().

We can re-write this code to be cleaner:
1) Rename "offset" to "off" because that's shorter.
2) Get rid of the "cnt" variable and just use "size - off" directly.
3) Get rid of the "read" variable and just increment "off" directly.

Fixes: 96fe6a2109db ("fbdev: Add VESA Coordinated Video Timings (CVT) support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/video/fbdev/core/fbcvt.c