Re: [syzbot] BUG: unable to handle kernel paging request in vga16fb_fillrect

From: Tetsuo Handa
Date: Mon Aug 30 2021 - 10:38:28 EST


On 2021/08/30 23:30, Geert Uytterhoeven wrote:
> The highest possible value of maxmem inside vga16fb_check_var()
> is 65536.

Yes.

>
> So I believe
>
> if (array_size(vxres, vyres) > maxmem)
>
> should work fine.

My intent is to check at common path than individual module so that we don't
need to add same check to every module. Same approach is proposed at
https://lkml.kernel.org/r/1630294223-7225-1-git-send-email-tcs_kernel@xxxxxxxxxxx .