[PATCH AUTOSEL 4.14 1/9] drm/radeon: Fix integer overflow in radeon_cs_parser_init

Pavel Machek pavel at ucw.cz
Mon Jul 24 10:16:58 UTC 2023


Hi!

> From: hackyzh002 <hackyzh002 at gmail.com>
> 
> [ Upstream commit f828b681d0cd566f86351c0b913e6cb6ed8c7b9c ]
> 
> The type of size is unsigned, if size is 0x40000000, there will be an
> integer overflow, size will be zero after size *= sizeof(uint32_t),
> will cause uninitialized memory to be referenced later

I only got the first patch of the series via lkml, rest seems to have
been lost somewhere :-(.

Best regards,
								Pavel
-- 
People of Russia, stop Putin before his war on Ukraine escalates.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/dri-devel/attachments/20230724/0fd17b77/attachment.sig>


More information about the dri-devel mailing list