diff options
| author | Alex Deucher <[email protected]> | 2023-07-28 11:14:05 -0400 |
|---|---|---|
| committer | Alex Deucher <[email protected]> | 2023-08-09 10:55:14 -0400 |
| commit | 90e065677e0362a777b9db97ea21d43a39211399 (patch) | |
| tree | c2d1a5e3e7497b188f4722e29625d5f0ff0b936f /drivers/platform/surface/aggregator/ssh_parser.c | |
| parent | a73ea79a0c94bacfab4df23a1043644d14f56591 (diff) | |
drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
Since the gang_size check is outside of chunk parsing
loop, we need to reset i before we free the chunk data.
Suggested by Ye Zhang (@VAR10CK) of Baidu Security.
Reviewed-by: Guchun Chen <[email protected]>
Reviewed-by: Christian König <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Cc: [email protected]
Diffstat (limited to 'drivers/platform/surface/aggregator/ssh_parser.c')
0 files changed, 0 insertions, 0 deletions