| commit | cf851f3ff891ff8cb204e7118682d55429c6fb96 | [log] [tgz] |
|---|---|---|
| author | Alex Deucher <alexander.deucher@amd.com> | Tue Aug 25 11:43:45 2020 -0400 |
| committer | Alex Deucher <alexander.deucher@amd.com> | Wed Aug 26 16:40:19 2020 -0400 |
| tree | 049665ac3f7eb76fdd22b48c052ca8435c5941d6 | |
| parent | c997e8e26c001c1a92200f44027f6c915c8f5487 [diff] |
drm/amdgpu: Fix buffer overflow in INFO ioctl The values for "se_num" and "sh_num" come from the user in the ioctl. They can be in the 0-255 range but if they're more than AMDGPU_GFX_MAX_SE (4) or AMDGPU_GFX_MAX_SH_PER_SE (2) then it results in an out of bounds read. Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Acked-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>