evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[VIDEO] sunxvr500fb: Fix pseudo_palette array size

Browse source 
- the pseudo_palette is only 16 elements long.
- the pseudo_palette has only 16 elements. Do not write if regno (the array
  index) is more than 15.

Signed-off-by: Antonino Daplas <adaplas@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Antonino Daplas 2007-06-05 13:15:26 -07:00 • committed by David S. Miller
parent f2c1386386
commit e7e8cc5ae6
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
drivers/video/sunxvr500.c
View file

@ -50,7 +50,7 @@ struct e3d_info {
u32 fb8_0_off; u32 fb8_0_off;
u32 fb8_1_off; u32 fb8_1_off;
u32 pseudo_palette[256]; u32 pseudo_palette[16];
}; };
static int __devinit e3d_get_props(struct e3d_info *ep) static int __devinit e3d_get_props(struct e3d_info *ep)
@ -126,7 +126,9 @@ static int e3d_setcolreg(unsigned regno,
blue_8 = blue >> 8; blue_8 = blue >> 8;
value = (blue_8 << 24) | (green_8 << 16) | (red_8 << 8); value = (blue_8 << 24) | (green_8 << 16) | (red_8 << 8);
((u32 *)info->pseudo_palette)[regno] = value;
if (info->fix.visual == FB_VISUAL_TRUECOLOR && regno < 16)
((u32 *)info->pseudo_palette)[regno] = value;
red_10 = red >> 6; red_10 = red >> 6;