| commit | 0913eab648e4fb30ddca8882e707d0fcf5b237c6 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Wed Sep 23 14:00:35 2015 +0300 |
| committer | Alex Deucher <alexander.deucher@amd.com> | Wed Sep 23 17:23:44 2015 -0400 |
| tree | 7530627890f1194b61d0e8ba57eefcc5e42ab59d | |
| parent | 0d2edd3791bb172a59d708d5c94330bbd6050f97 [diff] |
drm/amdgpu: info leak in amdgpu_gem_metadata_ioctl() There is no limit on args->data.data_size_bytes so we could read beyond the end of the args->data.data[] array. Reviewed-by: Christian König <christian.koenig@amd.com> Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>