Dan Carpenter 0d2edd3791 drm/amdgpu: integer overflow in amdgpu_info_ioctl() ...

The "alloc_size" calculation can overflow leading to memory corruption.

Reviewed-by: Christian König <christian.koenig@amd.com>
Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>

2015-09-23 17:23:43 -04:00

21 KiB

Raw Blame History

View Raw