tree 84d8c39d26ada4d6cd32db4eaa58b4bee0b86ffa
parent e2bf3723db563457c0abe4eaeedac25bbbbd1d76
author Alex Deucher <alexander.deucher@amd.com> 1598370225 -0400
committer Alex Deucher <alexander.deucher@amd.com> 1598471151 -0400

drm/amdgpu: Fix buffer overflow in INFO ioctl

The values for "se_num" and "sh_num" come from the user in the ioctl.
They can be in the 0-255 range but if they're more than
AMDGPU_GFX_MAX_SE (4) or AMDGPU_GFX_MAX_SH_PER_SE (2) then it results in
an out of bounds read.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Cc: stable@vger.kernel.org