diff options
| author | Dan Carpenter <[email protected]> | 2015-09-23 11:00:35 +0000 |
|---|---|---|
| committer | Alex Deucher <[email protected]> | 2015-09-23 21:23:44 +0000 |
| commit | 0913eab648e4fb30ddca8882e707d0fcf5b237c6 (patch) | |
| tree | 7530627890f1194b61d0e8ba57eefcc5e42ab59d /drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | |
| parent | drm/amdgpu: integer overflow in amdgpu_info_ioctl() (diff) | |
| download | kernel-0913eab648e4fb30ddca8882e707d0fcf5b237c6.tar.gz kernel-0913eab648e4fb30ddca8882e707d0fcf5b237c6.zip | |
drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl()
There is no limit on args->data.data_size_bytes so we could read beyond
the end of the args->data.data[] array.
Reviewed-by: Christian König <[email protected]>
Reported-by: Ilja Van Sprundel <[email protected]>
Signed-off-by: Dan Carpenter <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_device.c')
0 files changed, 0 insertions, 0 deletions