)]}'
{
  "commit": "3637d34b35b287ab830e66048841ace404382b67",
  "tree": "dca64b58f442167ccb4bc188d7cf58a803fae9fb",
  "parents": [
    "c8fee6a7c5cbde4908804aafc469391c22e72be9"
  ],
  "author": {
    "name": "Albin Babu Varghese",
    "email": "albinbabuvarghese20@gmail.com",
    "time": "Fri Oct 03 03:32:09 2025 -0400"
  },
  "committer": {
    "name": "Helge Deller",
    "email": "deller@gmx.de",
    "time": "Sat Oct 04 02:41:29 2025 +0200"
  },
  "message": "fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds\n\nAdd bounds checking to prevent writes past framebuffer boundaries when\nrendering text near screen edges. Return early if the Y position is off-screen\nand clip image height to screen boundary. Break from the rendering loop if the\nX position is off-screen. When clipping image width to fit the screen, update\nthe character count to match the clipped width to prevent buffer size\nmismatches.\n\nWithout the character count update, bit_putcs_aligned and bit_putcs_unaligned\nreceive mismatched parameters where the buffer is allocated for the clipped\nwidth but cnt reflects the original larger count, causing out-of-bounds writes.\n\nReported-by: syzbot+48b0652a95834717f190@syzkaller.appspotmail.com\nCloses: https://syzkaller.appspot.com/bug?extid\u003d48b0652a95834717f190\nSuggested-by: Helge Deller \u003cdeller@gmx.de\u003e\nTested-by: syzbot+48b0652a95834717f190@syzkaller.appspotmail.com\nSigned-off-by: Albin Babu Varghese \u003calbinbabuvarghese20@gmail.com\u003e\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f9475c14f7339b074205efe5a23109eae1d6b011",
      "old_mode": 33188,
      "old_path": "drivers/video/fbdev/core/bitblit.c",
      "new_id": "a9ec7f488522c6a6ba2ff63df1c3c85fe4ba80ea",
      "new_mode": 33188,
      "new_path": "drivers/video/fbdev/core/bitblit.c"
    }
  ]
}