mirror of
https://github.com/adulau/aha.git
synced 2024-12-28 19:56:18 +00:00
neofb: avoid overwriting fb_info fields
Fix bug identified by Marcio Buss in http://bugzilla.kernel.org/show_bug.cgi?id=9565 - neofb can overwrite a field in the fb_info struct. This fix will result in truncated device identification strings - perhaps fb_innfo.fix.id can be made larger? Cc: Marcio Buss <marciobuss@gmail.com> Cc: "Antonino A. Daplas" <adaplas@pol.net> Cc: Christian Trefzer <ctrefzer@gmx.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
parent
050da932f8
commit
0e9045494a
1 changed files with 18 additions and 9 deletions
|
@ -2066,40 +2066,49 @@ static struct fb_info *__devinit neo_alloc_fb_info(struct pci_dev *dev, const st
|
|||
|
||||
switch (info->fix.accel) {
|
||||
case FB_ACCEL_NEOMAGIC_NM2070:
|
||||
sprintf(info->fix.id, "MagicGraph 128");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 128");
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2090:
|
||||
sprintf(info->fix.id, "MagicGraph 128V");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 128V");
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2093:
|
||||
sprintf(info->fix.id, "MagicGraph 128ZV");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 128ZV");
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2097:
|
||||
sprintf(info->fix.id, "MagicGraph 128ZV+");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 128ZV+");
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2160:
|
||||
sprintf(info->fix.id, "MagicGraph 128XD");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 128XD");
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2200:
|
||||
sprintf(info->fix.id, "MagicGraph 256AV");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 256AV");
|
||||
info->flags |= FBINFO_HWACCEL_IMAGEBLIT |
|
||||
FBINFO_HWACCEL_COPYAREA |
|
||||
FBINFO_HWACCEL_FILLRECT;
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2230:
|
||||
sprintf(info->fix.id, "MagicGraph 256AV+");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 256AV+");
|
||||
info->flags |= FBINFO_HWACCEL_IMAGEBLIT |
|
||||
FBINFO_HWACCEL_COPYAREA |
|
||||
FBINFO_HWACCEL_FILLRECT;
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2360:
|
||||
sprintf(info->fix.id, "MagicGraph 256ZX");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 256ZX");
|
||||
info->flags |= FBINFO_HWACCEL_IMAGEBLIT |
|
||||
FBINFO_HWACCEL_COPYAREA |
|
||||
FBINFO_HWACCEL_FILLRECT;
|
||||
break;
|
||||
case FB_ACCEL_NEOMAGIC_NM2380:
|
||||
sprintf(info->fix.id, "MagicGraph 256XL+");
|
||||
snprintf(info->fix.id, sizeof(info->fix.id),
|
||||
"MagicGraph 256XL+");
|
||||
info->flags |= FBINFO_HWACCEL_IMAGEBLIT |
|
||||
FBINFO_HWACCEL_COPYAREA |
|
||||
FBINFO_HWACCEL_FILLRECT;
|
||||
|
|
Loading…
Reference in a new issue