Files
linux/drivers/gpu/drm/amd/amdgpu
Dan Carpenter 6fc72c1b88 drm/amdgpu: fix integer overflow test in amdgpu_bo_list_create()
[ Upstream commit ff30e9e850 ]

We accidentally left out the size of the amdgpu_bo_list struct.  It
could lead to memory corruption on 32 bit systems.  You'd have to
pick the absolute maximum and set "num_entries == 59652323" then size
would wrap to 16 bytes.

Fixes: 920990cb08 ("drm/amdgpu: allocate the bo_list array after the list")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Huang Rui <ray.huang@amd.com>
Reviewed-by: Bas Nieuwenhuizen <basni@chromium.org>
Signed-off-by: Huang Rui <ray.huang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-11-21 09:19:12 +01:00
..
2018-07-17 14:18:28 -05:00
2015-06-03 21:03:15 -04:00
2018-08-13 17:18:54 -05:00
2018-06-15 12:20:38 -05:00
2017-10-20 13:28:44 -04:00
2015-06-03 21:03:15 -04:00
2018-02-19 14:18:10 -05:00
2017-09-26 17:01:32 -04:00
2015-06-03 21:03:17 -04:00
2016-08-31 15:21:09 -04:00
2017-12-27 11:34:02 -05:00
2018-08-21 14:17:36 -05:00
2018-02-19 14:18:11 -05:00