Hi Linus, please pull the fbdev fixes and updates for 6.16-rc1:
Many small but important fixes for special cases in the fbdev, fbcon and vgacon code, some smaller code cleanups in the nvidiafb, arkfb, atyfb and viafb drivers and two spelling fixes. Thanks! Helge PS: All patches have been sitting in for-next for at least two days (the majority of patches since weeks). I did a rebase because fast-forward merging with head didn't work. ---------------------------------------------------------------- The following changes since commit 0f70f5b08a47a3bc1a252e5f451a137cde7c98ce: Merge tag 'pull-automount' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs (2025-05-30 15:38:29 -0700) are available in the Git repository at: http://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git tags/fbdev-for-6.16-rc1 for you to fetch changes up to 05f6e183879d9785a3cdf2f08a498bc31b7a20aa: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (2025-05-31 10:24:02 +0200) ---------------------------------------------------------------- fbdev fixes and updates for 6.16-rc1: Various bug fixes for corner cases which were found with Syzkaller, Svace and other tools by various people and teams (e.g. Linux Verification Center): fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var [Murad Masimov] fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var [Murad Masimov] fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() [Sergey Shtylyov] fbcon: Make sure modelist not set on unregistered console [Kees Cook] vgacon: Add check for vc_origin address range in vgacon_scroll() [GONG Ruiqi] Minor coding fixes in: nvidiafb, arkfb, atyfb, viafb. Spelling fixes in: sstfb.rst and carminefb. ---------------------------------------------------------------- Andy Shevchenko (1): fbdev: atyfb: Remove unused PCI vendor ID Bartosz Golaszewski (1): fbdev: via: use new GPIO line value setter callbacks Colin Ian King (1): fbdev: carminefb: Fix spelling mistake of CARMINE_TOTAL_DIPLAY_MEM GONG Ruiqi (1): vgacon: Add check for vc_origin address range in vgacon_scroll() Kees Cook (2): fbdev: arkfb: Cast ics5342_init() allocation type fbcon: Make sure modelist not set on unregistered console Murad Masimov (2): fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var Rujra Bhatt (1): fbdev: sstfb.rst: Fix spelling mistake Sergey Shtylyov (1): fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() Zijun Hu (1): fbdev: nvidiafb: Correct const string length in nvidiafb_setup() Documentation/fb/sstfb.rst | 2 +- drivers/video/console/vgacon.c | 2 +- drivers/video/fbdev/arkfb.c | 5 +++-- drivers/video/fbdev/carminefb.c | 8 ++++---- drivers/video/fbdev/carminefb.h | 2 +- drivers/video/fbdev/core/fbcon.c | 7 ++++++- drivers/video/fbdev/core/fbcvt.c | 2 +- drivers/video/fbdev/core/fbmem.c | 22 ++++++++++++++-------- drivers/video/fbdev/nvidia/nvidia.c | 2 +- drivers/video/fbdev/via/via-gpio.c | 10 +++++----- include/video/mach64.h | 3 --- 11 files changed, 37 insertions(+), 28 deletions(-)
