linux-kernel - Re: [PATCH v3 2/2] drm/amdgpu: Fix integer overflow in amdgpu_cs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CADnq5_MrRC-htfEn3TbR7pbs4rRZJL=zW-3swuc8VZQyHW0DXw@mail.gmail.com>
Date:   Fri, 28 Apr 2023 09:31:33 -0400
From:   Alex Deucher <alexdeucher@...il.com>
To:     whitehat002 whitehat002 <hackyzh002@...il.com>
Cc:     alexander.deucher@....com, Xinhui.Pan@....com,
        linux-kernel@...r.kernel.org, amd-gfx@...ts.freedesktop.org,
        sumit.semwal@...aro.org, linaro-mm-sig@...ts.linaro.org,
        dri-devel@...ts.freedesktop.org, daniel@...ll.ch,
        airlied@...il.com, christian.koenig@....com,
        linux-media@...r.kernel.org
Subject: Re: [PATCH v3 2/2] drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

these?
https://patchwork.freedesktop.org/series/116699/
https://patchwork.freedesktop.org/series/116695/

On Thu, Apr 27, 2023 at 8:45 PM whitehat002 whitehat002
<hackyzh002@...il.com> wrote:
>
> Alex,I have a question, why I don't see it on the
> https://patchwork.freedesktop.org/
>
> Alex Deucher <alexdeucher@...il.com> 于2023年4月27日周四 20:40写道：
> >
> > As per my prior reply, it has been applied.
> >
> > Thanks,
> >
> > Alex
> >
> > On Thu, Apr 27, 2023 at 8:39 AM whitehat002 whitehat002
> > <hackyzh002@...il.com> wrote:
> > >
> > > hello
> > > What is the current status of this patch, has it been applied?
> > >
> > >
> > > hackyzh002 <hackyzh002@...il.com> 于2023年4月19日周三 20:23写道：
> > > >
> > > > The type of size is unsigned int, if size is 0x40000000, there will
> > > > be an integer overflow, size will be zero after size *= sizeof(uint32_t),
> > > > will cause uninitialized memory to be referenced later.
> > > >
> > > > Signed-off-by: hackyzh002 <hackyzh002@...il.com>
> > > > ---
> > > >  drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +-
> > > >  1 file changed, 1 insertion(+), 1 deletion(-)
> > > >
> > > > diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c
> > > > index 08eced097..89bcacc65 100644
> > > > --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c
> > > > +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c
> > > > @@ -192,7 +192,7 @@ static int amdgpu_cs_pass1(struct amdgpu_cs_parser *p,
> > > >         uint64_t *chunk_array_user;
> > > >         uint64_t *chunk_array;
> > > >         uint32_t uf_offset = 0;
> > > > -       unsigned int size;
> > > > +       size_t size;
> > > >         int ret;
> > > >         int i;
> > > >
> > > > --
> > > > 2.34.1
> > > >