]> asedeno.scripts.mit.edu Git - linux.git/commit
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 389056e) | patch
drm/amdkfd: Integer overflows in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 24 Apr 2018 13:35:49 +0000 (16:35 +0300)
committerOded Gabbay <oded.gabbay@gmail.com>
Tue, 24 Apr 2018 13:35:49 +0000 (16:35 +0300)
commit8feaccf71dd61f2201493068055e0d1d699014df
tree3ab97c9b0e5b792ebb4d4004be4255e3ffc43542tree | snapshot
parent389056e5fef477c838dc20a08d6f1de960cf027bcommit | diff
drm/amdkfd: Integer overflows in ioctl

args->n_devices is a u32 that comes from the user.  The multiplication
could overflow on 32 bit systems possibly leading to privilege
escalation.

Fixes: 5ec7e02854b3 ("drm/amdkfd: Add ioctls for GPUVM memory management")
Signed-off-by: Dan Carpenter dan.carpenter@oracle.com>
Reviewed-by: Felix Kuehling <Felix.Kuehling@amd.com>
Signed-off-by: Oded Gabbay <oded.gabbay@gmail.com>
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c diff | blob | history
local clone of linux.git