android_kernel_xiaomi_sm8350/drivers/char
Wolfgang Kroworsch a564738c1c vt: incomplete initialization of vc_tab_stop
Problem 1 (see patch below):
  vc_tab_stop is declared as an array of 8 unsigned ints in struct
  vc_data in include/linux/console_struct.h .
  In drivers/char/vt.c only 5 of these 8 unsigned ints get initialized
  leading to unintended tabulator placement on displays with more than
  160 columns text.

Problem 2 (open):
  Upcoming displays will have more than 256 columns of text leading to
  invalid memory access in drivers/char/vt.c during tabulator
  calculations:
    if (vc->vc_tab_stop[vc->vc_x >> 5] & (1 << (vc->vc_x & 31)))
	break;

Signed-off-by: Wolfgang Kroworsch <wolfgang@kroworsch.de>
Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-11-06 15:41:17 -08:00
..
agp Merge git://git.kernel.org/pub/scm/linux/kernel/git/kyle/parisc-2.6 2008-10-20 14:40:31 -07:00
hw_random Tidy up addresses in random drivers 2008-10-27 08:39:52 -07:00
ip2 device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
ipmi saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
mwave mwave: ioctl BKL pushdown 2008-07-25 10:53:43 -07:00
pcmcia pcmcia: IRQ_TYPE_EXCLUSIVE is long obsoleted 2008-10-17 23:07:10 +02:00
rio rio: push down the BKL into the firmware ioctl handler 2008-07-25 10:53:43 -07:00
tpm tpm: don't export static functions 2008-10-20 08:50:24 -07:00
xilinx_hwicap device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
.gitignore
amiserial.c m68k: Disable Amiga serial console support if modular 2008-10-26 12:11:21 -07:00
apm-emulation.c
applicom.c applicom.c: fix apparently-broken code in do_ac_read() 2008-10-16 11:21:47 -07:00
applicom.h
bfin-otp.c
briq_panel.c
bsr.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
cd1865.h
ChangeLog
consolemap.c
cp437.uni
cs5535_gpio.c
cyclades.c Char: cyclades. remove bogus iomap 2008-10-13 09:51:38 -07:00
defkeymap.c_shipped
defkeymap.map
digi1.h
digiFep1.h
digiPCI.h
ds1302.c rtc: use bcd2bin/bin2bcd 2008-10-20 08:52:41 -07:00
ds1620.c [ARM] Move include/asm-arm/arch-* to arch/arm/*/include/mach 2008-08-07 09:55:48 +01:00
dsp56k.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
dtlk.c
efirtc.c drivers/char/efirtc.c: removed duplicated #include 2008-08-04 16:59:56 -07:00
epca.c epca: Add infinite break support 2008-10-20 09:41:06 -07:00
epca.h
epcaconfig.h
esp.c
generic_nvram.c
generic_serial.c tty: Remove lots of NULL checks 2008-10-13 09:51:44 -07:00
genrtc.c
hangcheck-timer.c
hpet.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
hvc_beat.c
hvc_console.c hvc_console: Remove __devexit annotation of hvc_remove() 2008-10-22 11:00:25 +11:00
hvc_console.h hvc_console: Remove __devexit annotation of hvc_remove() 2008-10-22 11:00:25 +11:00
hvc_irq.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_iseries.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_rtas.c
hvc_vio.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvc_xen.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
hvcs.c powerpc: Move include files to arch/powerpc/include/asm 2008-08-04 12:02:00 +10:00
hvsi.c
i8k.c
isicom.c tty: kref usage for isicom and moxa 2008-10-13 09:51:41 -07:00
istallion.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
Kconfig CHAR: Delete old and now unused M48T35 RTC driver for SGI IP27. 2008-10-30 14:44:35 +00:00
keyboard.c Input: keyboard - fix potential out of bound access to key_map 2008-10-08 23:45:36 -04:00
lp.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
Makefile CHAR: Delete old and now unused M48T35 RTC driver for SGI IP27. 2008-10-30 14:44:35 +00:00
mbcs.c
mbcs.h
mem.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
misc.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
mmtimer.c
moxa.c char: moxa.c sparse annotation 2008-10-16 11:21:47 -07:00
moxa.h
mspec.c
mxser.c tty: Remove lots of NULL checks 2008-10-13 09:51:44 -07:00
mxser.h
n_hdlc.c tty: some ICANON magic is in the wrong places 2008-10-13 09:51:44 -07:00
n_r3964.c tty: Remove lots of NULL checks 2008-10-13 09:51:44 -07:00
n_tty.c tty: rename the remaining oddly named n_tty functions 2008-10-13 09:51:45 -07:00
nozomi.c nozomi: Fix close on error 2008-10-13 09:51:39 -07:00
nsc_gpio.c
nvram.c [PATCH] introduce fmode_t, do annotations 2008-10-21 07:47:06 -04:00
nwbutton.c
nwbutton.h
nwflash.c [ARM] fix nwflash.c: 6ee8928d94 2008-07-26 16:29:24 +01:00
pc8736x_gpio.c pc8736x_gpio: add support for PC87365 chips 2008-10-20 08:52:40 -07:00
ppdev.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
ps3flash.c
pty.c pty: simplify unix98 allocation 2008-10-13 09:51:44 -07:00
random.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
raw.c [PATCH] kill the rest of struct file propagation in block ioctls 2008-10-21 07:49:14 -04:00
riscom8_reg.h
riscom8.c
riscom8.h
rocket_int.h
rocket.c
rocket.h
rtc.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
scc.h
scx200_gpio.c
selection.c
ser_a2232.c m68k: gs: use tty_port fixes 2008-07-26 20:29:03 -07:00
ser_a2232.h
ser_a2232fw.ax
ser_a2232fw.h
serial167.c
snsc_event.c
snsc.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
snsc.h
sonypi.c saner FASYNC handling on file close 2008-11-01 09:49:46 -07:00
specialix_io8.h
specialix.c
stallion.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
sx.c Char: sx, remove bogus iomap 2008-10-20 08:52:36 -07:00
sx.h
sxboards.h
sxwindow.h
synclink_gt.c removed unused #include <version.h> 2008-08-16 17:21:58 -07:00
synclink.c Merge branch 'for-jeff' of git://git.kernel.org/pub/scm/linux/kernel/git/chris/linux-2.6 into tmp 2008-08-07 04:05:46 -04:00
synclinkmp.c Merge branch 'for-jeff' of git://git.kernel.org/pub/scm/linux/kernel/git/chris/linux-2.6 into tmp 2008-08-07 04:05:46 -04:00
sysrq.c Fix documentation of sysrq-q 2008-10-20 08:52:34 -07:00
tb0219.c
tlclk.c
toshiba.c
tty_audit.c audit: Handle embedded NUL in TTY input auditing 2008-10-13 09:51:39 -07:00
tty_buffer.c tty: split the buffering from tty_io 2008-10-13 09:51:40 -07:00
tty_io.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
tty_ioctl.c tty: some ICANON magic is in the wrong places 2008-10-13 09:51:44 -07:00
tty_ldisc.c try harder to load tty ldisc driver 2008-08-01 12:50:15 -07:00
tty_port.c tty: Fix tty_port kref screwup 2008-10-23 09:20:53 -07:00
vc_screen.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
viotape.c device create: char: convert device_create_drvdata to device_create 2008-10-16 09:24:42 -07:00
virtio_console.c hvc_console: Add a hangup notifier for backends 2008-10-22 10:59:54 +11:00
vme_scc.c m68k: gs: use tty_port fixes 2008-07-26 20:29:03 -07:00
vr41xx_giu.c drivers/char: use nr_irqs 2008-10-16 16:52:05 +02:00
vt_ioctl.c tty: move tioclinux from a special case 2008-10-13 09:51:40 -07:00
vt.c vt: incomplete initialization of vc_tab_stop 2008-11-06 15:41:17 -08:00