diff options
| author | Jiri Slaby <[email protected]> | 2020-03-19 11:04:21 +0100 |
|---|---|---|
| committer | Gerd Hoffmann <[email protected]> | 2020-04-06 15:10:37 +0200 |
| commit | b513b0d4563ab70a0a25e7a0ed94afaf88ac28bf (patch) | |
| tree | dc4570f0bc89df6b7e057411acb99c8240cfc957 /lib/pm-notifier-error-inject.c | |
| parent | c0f83d164fb8f3a2b7bc379a6c1e27d1123a9eab (diff) | |
drm/virtio: fix OOB in virtio_gpu_object_create
After commit f651c8b05542 ("drm/virtio: factor out the sg_table from
virtio_gpu_object"), virtio_gpu_create_object allocates too small space
to fit everything in. It is because it allocates struct
virtio_gpu_object, but should allocate a newly added struct
virtio_gpu_object_shmem which has 2 more members.
So fix that by using correct type in virtio_gpu_create_object.
Signed-off-by: Jiri Slaby <[email protected]>
Link: http://patchwork.freedesktop.org/patch/msgid/[email protected]
Fixes: f651c8b05542 ("drm/virtio: factor out the sg_table from virtio_gpu_object")
Cc: Gurchetan Singh <[email protected]>
Cc: Gerd Hoffmann <[email protected]>
Signed-off-by: Gerd Hoffmann <[email protected]>
(cherry picked from commit 0666a8d7f6a4530440e59f2d22ed4091f4d3818c)
Diffstat (limited to 'lib/pm-notifier-error-inject.c')
0 files changed, 0 insertions, 0 deletions