projects / platform / kernel / linux-starfive.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c4d7738) | patch
drm/radeon: integer overflow in radeon_mode_dumb_create()
authorXiaohui Zhang <xiaohuizhang@ruc.edu.cn>
Tue, 7 Jun 2022 15:36:31 +0000 (23:36 +0800)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 8 Jun 2022 15:40:41 +0000 (11:40 -0400)
commitfeb54650bae25f2a2adfc493e3e254e7c27a3fba
tree222796f50528fe3fcbf35591ff58457e4a0c92cetree | snapshot
parentc4d7738c9efc81a4f0364da1e673ab1b1cf91735commit | diff
drm/radeon: integer overflow in radeon_mode_dumb_create()

Similar to the handling of amdgpu_mode_dumb_create in commit 54ef0b5461c0
("drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()"),
we thought a patch might be needed here as well.

args->size is a u64.  arg->pitch and args->height are u32.  The
multiplication will overflow instead of using the high 32 bits as
intended.

Signed-off-by: Xiaohui Zhang <xiaohuizhang@ruc.edu.cn>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/radeon/radeon_gem.c diff | blob | history
Domain: System / Kernel;