]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 09b33ef) | patch
drm/radeon: integer overflow in radeon_mode_dumb_create()
authorXiaohui Zhang <xiaohuizhang@ruc.edu.cn>
Tue, 7 Jun 2022 15:36:31 +0000 (23:36 +0800)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 8 Jun 2022 15:40:41 +0000 (11:40 -0400)
commitf89a5b1f9d5c680947c64867f67e09fe57c0835f
tree222796f50528fe3fcbf35591ff58457e4a0c92cetree | snapshot
parent09b33efaeb877e6be819c4384c2c69963bade803commit | diff
drm/radeon: integer overflow in radeon_mode_dumb_create()

Similar to the handling of amdgpu_mode_dumb_create in commit b8782d5a2cd6
("drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()"),
we thought a patch might be needed here as well.

args->size is a u64.  arg->pitch and args->height are u32.  The
multiplication will overflow instead of using the high 32 bits as
intended.

Signed-off-by: Xiaohui Zhang <xiaohuizhang@ruc.edu.cn>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/radeon/radeon_gem.c diff | blob | history
Linux Kernel Source Tree.