diff options
| author | Antonino A. Daplas <adaplas@gmail.com> | 2007-07-17 04:05:44 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@woody.linux-foundation.org> | 2007-07-17 10:23:13 -0700 |
| commit | 000d5335c6e7f5dbcd849b62b4be7ae005aa6974 (patch) | |
| tree | af6894791cc9fbd7dd38ac2ec0026be0f1a75a42 /drivers/video/sis/sis_main.c | |
| parent | c312f97df65bf38a8e7f664b76154639f593775d (diff) | |
| download | linux-000d5335c6e7f5dbcd849b62b4be7ae005aa6974.tar.gz linux-000d5335c6e7f5dbcd849b62b4be7ae005aa6974.tar.bz2 linux-000d5335c6e7f5dbcd849b62b4be7ae005aa6974.zip | |
sisfb: fix pseudo_palette array size and overrun
- the pseudo_palette is only 16 elements long.
- do not write to the pseudo_palette if regno (array index) is more than 15.
Signed-off-by: Antonino Daplas <adaplas@gmail.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'drivers/video/sis/sis_main.c')
| -rw-r--r-- | drivers/video/sis/sis_main.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/drivers/video/sis/sis_main.c b/drivers/video/sis/sis_main.c index 93d07ef85276..e8ccace01252 100644 --- a/drivers/video/sis/sis_main.c +++ b/drivers/video/sis/sis_main.c @@ -1405,12 +1405,18 @@ sisfb_setcolreg(unsigned regno, unsigned red, unsigned green, unsigned blue, } break; case 16: + if (regno >= 16) + break; + ((u32 *)(info->pseudo_palette))[regno] = (red & 0xf800) | ((green & 0xfc00) >> 5) | ((blue & 0xf800) >> 11); break; case 32: + if (regno >= 16) + break; + red >>= 8; green >>= 8; blue >>= 8; |