diff options
| author | Christian König <christian.koenig@amd.com> | 2019-04-02 09:26:52 +0200 |
|---|---|---|
| committer | Alex Deucher <alexander.deucher@amd.com> | 2019-04-11 10:01:23 -0500 |
| commit | a66477b0efe511d98dde3e4aaeb189790e6f0a39 (patch) | |
| tree | 3e11a009d8febc57fa91ed03745d1daf92c3680f /lib/uuid.c | |
| parent | d47703d43ecaa9189d70fb5d151a6883cc44afd3 (diff) | |
drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
When ttm_put_pages() tries to figure out whether it's dealing with
transparent hugepages, it just reads past the bounds of the pages array
without a check.
v2: simplify the test if enough pages are left in the array (Christian).
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Christian König <christian.koenig@amd.com>
Fixes: 5c42c64f7d54 ("drm/ttm: fix the fix for huge compound pages")
Cc: stable@vger.kernel.org
Reviewed-by: Michel Dänzer <michel.daenzer@amd.com>
Reviewed-by: Junwei Zhang <Jerry.Zhang@amd.com>
Reviewed-by: Huang Rui <ray.huang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'lib/uuid.c')
0 files changed, 0 insertions, 0 deletions