diff options
| author | Dan Carpenter <[email protected]> | 2025-05-23 16:09:52 +0000 |
|---|---|---|
| committer | Alex Deucher <[email protected]> | 2025-06-03 19:31:13 +0000 |
| commit | 335f1e797c32cbe6f313805125526b35d29280b0 (patch) | |
| tree | fa1a98a819294da6d203b2e6c28d4782e9608adc /drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | |
| parent | drm/amdgpu: Fix integer overflow issues in amdgpu_userq_fence.c (diff) | |
| download | kernel-335f1e797c32cbe6f313805125526b35d29280b0.tar.gz kernel-335f1e797c32cbe6f313805125526b35d29280b0.zip | |
drm/amdgpu: Fix integer overflow in amdgpu_gem_add_input_fence()
The "num_syncobj_handles" is a u32 value that comes from the user via the
ioctl. On 32bit systems the "sizeof(uint32_t) * num_syncobj_handles"
multiplication can have an integer overflow. Use size_mul() to fix that.
Fixes: 38c67ec9aa4b ("drm/amdgpu: Add input fence to sync bo map/unmap")
Signed-off-by: Dan Carpenter <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c')
0 files changed, 0 insertions, 0 deletions