diff options
| author | Jiri Slaby <jslaby@suse.cz> | 2020-03-19 11:04:21 +0100 |
|---|---|---|
| committer | Gerd Hoffmann <kraxel@redhat.com> | 2020-03-19 12:00:24 +0100 |
| commit | 0666a8d7f6a4530440e59f2d22ed4091f4d3818c (patch) | |
| tree | 90c542c7313c9c8c2a7bb71241509fd0cd970d34 /fs/reiserfs/stree.c | |
| parent | b684822a44469fe44b80aef5cdca52cd979a4ecb (diff) | |
| download | linux-0666a8d7f6a4530440e59f2d22ed4091f4d3818c.tar.bz2 | |
drm/virtio: fix OOB in virtio_gpu_object_create
After commit f651c8b05542 ("drm/virtio: factor out the sg_table from
virtio_gpu_object"), virtio_gpu_create_object allocates too small space
to fit everything in. It is because it allocates struct
virtio_gpu_object, but should allocate a newly added struct
virtio_gpu_object_shmem which has 2 more members.
So fix that by using correct type in virtio_gpu_create_object.
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
Link: http://patchwork.freedesktop.org/patch/msgid/20200319100421.16267-1-jslaby@suse.cz
Fixes: f651c8b05542 ("drm/virtio: factor out the sg_table from virtio_gpu_object")
Cc: Gurchetan Singh <gurchetansingh@chromium.org>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Diffstat (limited to 'fs/reiserfs/stree.c')
0 files changed, 0 insertions, 0 deletions