]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c230f6a) | patch
drm/amdgpu: Fix buffer overflow in INFO ioctl
authorAlex Deucher <alexander.deucher@amd.com>
Tue, 25 Aug 2020 15:43:45 +0000 (11:43 -0400)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 26 Aug 2020 20:40:19 +0000 (16:40 -0400)
commit87620328cdee56bdaf74688290a24088783eb2e4
tree049665ac3f7eb76fdd22b48c052ca8435c5941d6tree | snapshot
parentc230f6aadb8e8b606ecf4cc32b9f96a6188974f7commit | diff
drm/amdgpu: Fix buffer overflow in INFO ioctl

The values for "se_num" and "sh_num" come from the user in the ioctl.
They can be in the 0-255 range but if they're more than
AMDGPU_GFX_MAX_SE (4) or AMDGPU_GFX_MAX_SH_PER_SE (2) then it results in
an out of bounds read.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c diff | blob | history
Linux Kernel Source Tree.