• qiaochong's avatar
    drivers/char/vt.c: fix vc->vc_origin on take_over_console() · 02f0777a
    qiaochong authored
    kernel will die on some platform when switch from vga mode to framebuffer
    mode.  The reason of this bug is that bind_con_driver reset vc->vc_origin
    to (unsigned long)vc->vc_screenbuf.
    
    On vgacon vc->vc_origin is not releated to vc->vc_screenbuf,if set
    vc->vc_origin to vc->vc_screenbuf,kernel will die on vc_do_resize.
    
    static int vc_do_resize(struct tty_struct *tty, struct tty_struct *real_tty,
            struct vc_data *vc, unsigned int cols, unsigned int lines)
    {
        unsigned long old_origin, new_origin, new_scr_end, rlth, rrem, err = 0;
        unsigned int old_cols, old_rows, old_row_size, old_screen_size;
        unsigned int new_cols, new_rows, new_row_size, new_screen_size;
        unsigned int end, user;
    ...
            end = (old_rows > new_rows) ? old_origin +
                (old_row_size * new_rows) :
                vc->vc_scr_end;
    
    ...
    /*
    here for a test from vgacon to framebuffer:
    old_origin=0x810814a0,end=0xb00b8fa0,vc->vc_origin=0x810814a0
    the code bellow will copy memory from 0x810814a0 to 0xb00b8fa0,
    this will cover kernel code,kernel died here.
    */
    
        while (old_origin < end) {
    
            scr_memcpyw((unsigned short *) new_origin,
                    (unsigned short *) old_origin, rlth);
            if (rrem)
                scr_memsetw((void *)(new_origin + rlth),
                        vc->vc_video_erase_char, rrem);
            old_origin += old_row_size;
            new_origin += new_row_size;
        }
    
    ...
    }
    
    [akpm@linux-foundation.org: coding-style fixes]
    Signed-off-by: default avatarqiaochong <qiaochong@loongson.cn>
    Cc: Greg KH <greg@kroah.com>
    Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
    Signed-off-by: default avatarAndrew Morton <akpm@linux-foundation.org>
    Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
    02f0777a
vt.c 101 KB