[GIT PULL] additional fbdev fixes and updates for v7.2-rc1

Helge Deller <[email protected]>
Newsgroups org.kernel.vger.linux-fbdev,org.freedesktop.lists.dri-devel,org.kernel.vger.linux-kernel
Message-ID <akANXx5Fr4vBRhwg@carbonx1>
Hi Linus,

please pull the second half of fbdev fixes for this merge window:

Two patches for generic fbdev & fbcon code which fixes the handling of
modelists and prevents a potential NULL ptr dereference in the console code.

Five patches fix various missed cleanups in the error path of various fbdev
drivers.

And Uwe Kleine-König contributed one cleanup patch to use named initializers
in the vga16fb driver.

Thanks!
Helge

----------------------------------------------------------------

The following changes since commit 4708cac0e22cfd217f48f7cec3c35e5922efcccd:

  Merge tag 'staging-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging (2026-06-22 12:43:16 -0700)

are available in the Git repository at:

  http://git.kernel.org/pub/scm/linux/kernel/git/deller/linux-fbdev.git tags/fbdev-for-7.2-rc1-2

for you to fetch changes up to 7f08fc10fa3d3366dc3af723970bd03d7d6d10e3:

  fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var (2026-06-26 15:12:45 +0200)

----------------------------------------------------------------
additional fbdev fixes & cleanups for 7.2-rc1:

Fixes:
- fbcon: fix NULL pointer dereference for a console without vc_data [Ian Bridges]
- fbdev: fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var [Ian Bridges]

Fixes in failure paths:
- pm2fb: unwind write-cache setting on probe failure [Haoxiang Li]
- goldfishfb: fail pan display on base-update timeout [Pengpeng Hou]
- viafb: return error on DMA copy time-out [Pengpeng Hou]
- fbcon: fix out-of-bounds read in error path of fbcon_do_set_font() [Mingyu Wang]
- fbdev: fix modelist use-after-free in store_modes() [Ian Bridges]

Code cleanup:
- vga16fb: clean up platform_device_id table [Uwe Kleine-König]

----------------------------------------------------------------
Haoxiang Li (1):
      fbdev: pm2fb: unwind WC setup on probe failure

Ian Bridges (3):
      fbdev: fix use-after-free in store_modes()
      fbcon: fix NULL pointer dereference for a console without vc_data
      fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

Mingyu Wang (1):
      fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()

Pengpeng Hou (2):
      fbdev: goldfishfb: fail pan display on base-update timeout
      fbdev: viafb: return an error when DMA copy times out

Uwe Kleine-König (1):
      fbdev: vga16fb: Drop unused assignment of platform_device_id driver data

 drivers/video/fbdev/core/fbcon.c   | 14 +++++++++++---
 drivers/video/fbdev/core/fbmem.c   | 12 ++++++++++++
 drivers/video/fbdev/core/fbsysfs.c | 10 +++++++++-
 drivers/video/fbdev/goldfishfb.c   | 13 +++++++++----
 drivers/video/fbdev/pm2fb.c        |  1 +
 drivers/video/fbdev/vga16fb.c      |  4 ++--
 drivers/video/fbdev/via/via-core.c |  7 +++++--
 7 files changed, 49 insertions(+), 12 deletions(-)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.