[PATCH AUTOSEL 4.14 1/9] drm/radeon: Fix integer overflow in radeon_cs_parser_init
Pavel Machek
pavel at ucw.cz
Mon Jul 24 10:16:58 UTC 2023
Hi!
> From: hackyzh002 <hackyzh002 at gmail.com>
>
> [ Upstream commit f828b681d0cd566f86351c0b913e6cb6ed8c7b9c ]
>
> The type of size is unsigned, if size is 0x40000000, there will be an
> integer overflow, size will be zero after size *= sizeof(uint32_t),
> will cause uninitialized memory to be referenced later
I only got the first patch of the series via lkml, rest seems to have
been lost somewhere :-(.
Best regards,
Pavel
--
People of Russia, stop Putin before his war on Ukraine escalates.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/dri-devel/attachments/20230724/0fd17b77/attachment.sig>
More information about the dri-devel
mailing list