msm: mdss: Correct the format specifiers in sscanf function
In many parts of the code the sscanf function was getting
an unsigned integer with a wrong format specifier. Changed
the format specifiers appropriately. Single variable sscanf
were replaced by kstrtouint at reported places.
CRs-Fixed: 1024872
CAF-Change-Id: I03ce718b0456d437d31d701586965d0aa7443b51
Signed-off-by: Shalini Krishnamoorthi <shakri@codeaurora.org>
[haggertk]: Backport to 3.4/msm8974
CVE-2016-10232
Change-Id: Ie5913a1479e7517a13addcba72efb44698b773c6
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
diff --git a/drivers/video/msm/mdss/mdss_fb.c b/drivers/video/msm/mdss/mdss_fb.c
index 8e4d16e..25c9d98 100644
--- a/drivers/video/msm/mdss/mdss_fb.c
+++ b/drivers/video/msm/mdss/mdss_fb.c
@@ -543,7 +543,7 @@
if (count > 19)
return -EINVAL;
- sscanf(buf, "%d %d %d", &r, &g, &b);
+ sscanf(buf, "%u %u %u", &r, &g, &b);
if (r < 0 || r > 32768)
return -EINVAL;