drm/amdgpu: integer overflow in amdgpu_info_ioctl()
authorDan Carpenter <[email protected]>
Wed, 23 Sep 2015 11:00:12 +0000 (14:00 +0300)
committerAlex Deucher <[email protected]>
Wed, 23 Sep 2015 21:23:43 +0000 (17:23 -0400)
commit0d2edd3791bb172a59d708d5c94330bbd6050f97
treee102cd9a986d69808aef424edbbd76e9e786532e
parent1d263474c4416efb6d0feca98fe6d462b0d28f56
drm/amdgpu: integer overflow in amdgpu_info_ioctl()

The "alloc_size" calculation can overflow leading to memory corruption.

Reviewed-by: Christian König <[email protected]>
Reported-by: Ilja Van Sprundel <[email protected]>
Signed-off-by: Dan Carpenter <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c