mirror of
https://github.com/AsahiLinux/u-boot
synced 2024-11-11 15:37:23 +00:00
74446b63dd
There seems to be tools producing incorrect 'end of bitmap data' markers '0100' in a RLE bitmap. Drawing such bitmaps can result in overwriting memory above the frame buffer. E.g. on MPC5121e based boards this memory can contain U-Boot environment. We may not rely on the correct end of bitmap data marker 0001 only, but also have to check whether we are going to draw a valid frame buffer scan line. The patch provides a fix by maintaining a pixel counter which is incremented by the amount of pixels we are going to draw. If the counter exceeds frame buffer pixels limit we stop the drawing with the error message. Reported-by: Michael Weiss <michael.weiss@ifm.com> Signed-off-by: Anatolij Gustschin <agust@denx.de> Tested-by: Anatolij Gustschin <agust@denx.de> |
||
|---|---|---|
| .. | ||
| amba.c | ||
| ati_ids.h | ||
| ati_radeon_fb.c | ||
| ati_radeon_fb.h | ||
| atmel_lcdfb.c | ||
| bus_vcxk.c | ||
| cfb_console.c | ||
| ct69000.c | ||
| fsl_diu_fb.c | ||
| ipu.h | ||
| ipu_common.c | ||
| ipu_disp.c | ||
| ipu_regs.h | ||
| Makefile | ||
| mb86r0xgdc.c | ||
| mb862xx.c | ||
| mx3fb.c | ||
| mxc_ipuv3_fb.c | ||
| mxcfb.h | ||
| s6e63d6.c | ||
| sed156x.c | ||
| sed13806.c | ||
| sm501.c | ||
| smiLynxEM.c | ||
| videomodes.c | ||
| videomodes.h | ||