AuxXxilium/linux_dsm_epyc7002
1
0
Fork 0
mirror of https://github.com/AuxXxilium/linux_dsm_epyc7002.git synced 2025-01-19 01:26:42 +07:00
Code Issues Actions Packages Projects Releases Wiki Activity

drm/amd/amdgpu: ring debugfs is read in increments of 4 bytes

Browse Source 
If a user tries to read a non-multiple of 4 bytes it would have
read until the end of the ring potentially crashing the user
task.

Signed-off-by: Tom St Denis <tom.stdenis@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
This commit is contained in:
Tom St Denis 2016-05-02 08:35:35 -04:00 committed by Alex Deucher
parent 4f4824b556
commit c71dbd93eb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c
View File

@ -383,7 +383,7 @@ static ssize_t amdgpu_debugfs_ring_read(struct file *f, char __user *buf,
int r, i;
uint32_t value, result, early[3];
if (*pos & 3)
if (*pos & 3 || size & 3)
return -EINVAL;
result = 0;