drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
authorhackyzh002 <hackyzh002@gmail.com>
Wed, 19 Apr 2023 12:22:33 +0000 (20:22 +0800)
committerAlex Deucher <alexander.deucher@amd.com>
Fri, 21 Apr 2023 12:50:21 +0000 (08:50 -0400)
commit87c2213e85bd81e4a9a4d0880c256568794ae388
tree20b3d8c95aca9c9b18235301b7fc16123e0fe597
parentf828b681d0cd566f86351c0b913e6cb6ed8c7b9c
drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

The type of size is unsigned int, if size is 0x40000000, there will
be an integer overflow, size will be zero after size *= sizeof(uint32_t),
will cause uninitialized memory to be referenced later.

Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: hackyzh002 <hackyzh002@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c