mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2025-01-14 03:46:07 +07:00
8438846cce
This fixes multiple things in the habanalabs debugfs code, in particular: - mmu_write() was unnecessarily verbose, copying around between multiple buffers - mmu_write() could write a user-specified, unbounded amount of userspace memory into a kernel buffer (out-of-bounds write) - multiple debugfs read handlers ignored the user-supplied count, potentially corrupting out-of-bounds userspace data - hl_device_read() was unnecessarily verbose - hl_device_write() could read uninitialized stack memory - multiple debugfs read handlers copied terminating null characters to userspace Signed-off-by: Jann Horn <jannh@google.com> Reviewed-by: Oded Gabbay <oded.gabbay@gmail.com> Signed-off-by: Oded Gabbay <oded.gabbay@gmail.com> Cc: stable@vger.kernel.org |
||
|---|---|---|
| .. | ||
| goya | ||
| include | ||
| asid.c | ||
| command_buffer.c | ||
| command_submission.c | ||
| context.c | ||
| debugfs.c | ||
| device.c | ||
| firmware_if.c | ||
| habanalabs_drv.c | ||
| habanalabs_ioctl.c | ||
| habanalabs.h | ||
| hw_queue.c | ||
| hwmon.c | ||
| irq.c | ||
| Kconfig | ||
| Makefile | ||
| memory.c | ||
| mmu.c | ||
| pci.c | ||
| sysfs.c | ||