| commit | eb3b6805e3e9d98b2507201fd061a231988ce623 | [log] [tgz] |
|---|---|---|
| author | Thelford Williams <tdwilliamsiv@gmail.com> | Wed Oct 13 16:04:13 2021 -0400 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Tue Nov 02 19:48:21 2021 +0100 |
| tree | 5099c30e0b0f53ce1caa70d6f6347f092fc557ec | |
| parent | c21b4002214c1c7e7b627b9b53375612f7aab6db [diff] |
drm/amdgpu: fix out of bounds write commit 5afa7898ab7a0ec9c28556a91df714bf3c2f725e upstream. Size can be any value and is user controlled resulting in overwriting the 40 byte array wr_buf with an arbitrary length of data from buf. Signed-off-by: Thelford Williams <tdwilliamsiv@gmail.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com> Cc: stable@vger.kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>