diff options
| author | Ian Forbes <ian.forbes@broadcom.com> | 2025-10-21 14:01:28 -0500 |
|---|---|---|
| committer | Zack Rusin <zack.rusin@broadcom.com> | 2025-11-06 23:59:40 -0500 |
| commit | 32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af (patch) | |
| tree | f6a8a6d5e2524cc0881fc83ffab7deffcacac305 /net/unix/af_unix.c | |
| parent | b750f5a9d64df6cfe9103c7feb7314694318818d (diff) | |
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
This data originates from userspace and is used in buffer offset
calculations which could potentially overflow causing an out-of-bounds
access.
Fixes: 8ce75f8ab904 ("drm/vmwgfx: Update device includes for DX device functionality")
Reported-by: Rohit Keshri <rkeshri@redhat.com>
Signed-off-by: Ian Forbes <ian.forbes@broadcom.com>
Reviewed-by: Maaz Mombasawala <maaz.mombasawala@broadcom.com>
Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Link: https://patch.msgid.link/20251021190128.13014-1-ian.forbes@broadcom.com
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions