| commit | b5b97cab55eb71daba3283c8b1d2cce456d511a1 | [log] [tgz] |
|---|---|---|
| author | Alex Deucher <alexander.deucher@amd.com> | Tue Aug 25 11:43:45 2020 -0400 |
| committer | Alex Deucher <alexander.deucher@amd.com> | Wed Aug 26 15:45:51 2020 -0400 |
| tree | 84d8c39d26ada4d6cd32db4eaa58b4bee0b86ffa | |
| parent | e2bf3723db563457c0abe4eaeedac25bbbbd1d76 [diff] |
drm/amdgpu: Fix buffer overflow in INFO ioctl The values for "se_num" and "sh_num" come from the user in the ioctl. They can be in the 0-255 range but if they're more than AMDGPU_GFX_MAX_SE (4) or AMDGPU_GFX_MAX_SH_PER_SE (2) then it results in an out of bounds read. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com> Cc: stable@vger.kernel.org