diff options
| author | hackyzh002 <[email protected]> | 2023-04-19 12:22:33 +0000 |
|---|---|---|
| committer | Alex Deucher <[email protected]> | 2023-04-21 12:50:21 +0000 |
| commit | 87c2213e85bd81e4a9a4d0880c256568794ae388 (patch) | |
| tree | 20b3d8c95aca9c9b18235301b7fc16123e0fe597 /drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | |
| parent | drm/radeon: Fix integer overflow in radeon_cs_parser_init (diff) | |
| download | kernel-87c2213e85bd81e4a9a4d0880c256568794ae388.tar.gz kernel-87c2213e85bd81e4a9a4d0880c256568794ae388.zip | |
drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
The type of size is unsigned int, if size is 0x40000000, there will
be an integer overflow, size will be zero after size *= sizeof(uint32_t),
will cause uninitialized memory to be referenced later.
Reviewed-by: Christian König <[email protected]>
Signed-off-by: hackyzh002 <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c')
0 files changed, 0 insertions, 0 deletions