Commit b505d2aa authored by hackyzh002's avatar hackyzh002 Committed by sanglipeng
Browse files

drm/radeon: Fix integer overflow in radeon_cs_parser_init

stable inclusion
from stable-v5.10.192
commit e6825b30d37fe89ceb87f926d33d4fad321a331e
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I933RF

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e6825b30d37fe89ceb87f926d33d4fad321a331e



--------------------------------

[ Upstream commit f828b681 ]

The type of size is unsigned, if size is 0x40000000, there will be an
integer overflow, size will be zero after size *= sizeof(uint32_t),
will cause uninitialized memory to be referenced later

Reviewed-by: default avatarChristian König <christian.koenig@amd.com>
Signed-off-by: default avatarhackyzh002 <hackyzh002@gmail.com>
Signed-off-by: default avatarAlex Deucher <alexander.deucher@amd.com>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
Signed-off-by: default avatarsanglipeng <sanglipeng1@jd.com>
parent d2c04c3c
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment