linux_dsm_epyc7002/drivers/gpu
Dan Carpenter ff30e9e850 drm/amdgpu: fix integer overflow test in amdgpu_bo_list_create()
We accidentally left out the size of the amdgpu_bo_list struct.  It
could lead to memory corruption on 32 bit systems.  You'd have to
pick the absolute maximum and set "num_entries == 59652323" then size
would wrap to 16 bytes.

Fixes: 920990cb08 ("drm/amdgpu: allocate the bo_list array after the list")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Huang Rui <ray.huang@amd.com>
Reviewed-by: Bas Nieuwenhuizen <basni@chromium.org>
Signed-off-by: Huang Rui <ray.huang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
2018-08-27 11:10:42 -05:00
..
drm drm/amdgpu: fix integer overflow test in amdgpu_bo_list_create() 2018-08-27 11:10:42 -05:00
host1x gpu: host1x: Check whether size of unpin isn't 0 2018-07-09 10:31:30 +02:00
ipu-v3 drm pull for 4.19-rc1 2018-08-15 17:39:07 -07:00
vga vga_switcheroo: set audio client id according to bound GPU id 2018-07-17 11:12:00 +02:00
Makefile