diff options
author | Thelford Williams <tdwilliamsiv@gmail.com> | 2021-10-13 16:04:13 -0400 |
---|---|---|
committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2021-11-02 19:48:21 +0100 |
commit | eb3b6805e3e9d98b2507201fd061a231988ce623 (patch) | |
tree | 5099c30e0b0f53ce1caa70d6f6347f092fc557ec /kernel/bpf/arraymap.c | |
parent | c21b4002214c1c7e7b627b9b53375612f7aab6db (diff) |
drm/amdgpu: fix out of bounds write
commit 5afa7898ab7a0ec9c28556a91df714bf3c2f725e upstream.
Size can be any value and is user controlled resulting in overwriting the
40 byte array wr_buf with an arbitrary length of data from buf.
Signed-off-by: Thelford Williams <tdwilliamsiv@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'kernel/bpf/arraymap.c')
0 files changed, 0 insertions, 0 deletions