diff options
| author | Dave Airlie <airlied@redhat.com> | 2024-04-25 20:36:03 +0800 |
|---|---|---|
| committer | Xiang Yang <xiangyang3@huawei.com> | 2024-04-25 20:41:09 +0800 |
| commit | 5674dade0f45ee3a8dcd004e22fcf0d2055bceed (patch) | |
| tree | 824df7b30380aae9e03cd91b0efc109d6740338d | |
| parent | fca9656c7bff35049038766e63e93888847b5bff (diff) | |
| download | openEuler-kernel-5674dade0f45ee3a8dcd004e22fcf0d2055bceed.tar.gz | |
amdkfd: use calloc instead of kzalloc to avoid integer overflow
stable inclusion
from stable-v5.10.215
commit fcbd99b3c73309107e3be71f20dff9414df64f91
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9GE8D
CVE: CVE-2024-26817
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=fcbd99b3c73309107e3be71f20dff9414df64f91
--------------------------------
commit 3b0daecfeac0103aba8b293df07a0cbaf8b43f29 upstream.
This uses calloc instead of doing the multiplication which might
overflow.
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Xiang Yang <xiangyang3@huawei.com>
| -rw-r--r-- | drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/drivers/gpu/drm/amd/amdkfd/kfd_chardev.c b/drivers/gpu/drm/amd/amdkfd/kfd_chardev.c index 8cc51cec988a4e..799a91a064a1b9 100644 --- a/drivers/gpu/drm/amd/amdkfd/kfd_chardev.c +++ b/drivers/gpu/drm/amd/amdkfd/kfd_chardev.c @@ -959,8 +959,8 @@ static int kfd_ioctl_get_process_apertures_new(struct file *filp, * nodes, but not more than args->num_of_nodes as that is * the amount of memory allocated by user */ - pa = kzalloc((sizeof(struct kfd_process_device_apertures) * - args->num_of_nodes), GFP_KERNEL); + pa = kcalloc(args->num_of_nodes, sizeof(struct kfd_process_device_apertures), + GFP_KERNEL); if (!pa) return -ENOMEM; |