Nikita Zhandarovich
dd8689b52a
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
...
On the off chance that command stream passed from userspace via
ioctl() call to radeon_vce_cs_parse() is weirdly crafted and
first command to execute is to encode (case 0x03000001), the function
in question will attempt to call radeon_vce_cs_reloc() with size
argument that has not been properly initialized. Specifically, 'size'
will point to 'tmp' variable before the latter had a chance to be
assigned any value.
Play it safe and init 'tmp' with 0, thus ensuring that
radeon_vce_cs_reloc() will catch an early error in cases like these.
Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.
Fixes: 2fc5703abd ("drm/radeon: check VCE relocation buffer range v3")
Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru >
Signed-off-by: Alex Deucher <alexander.deucher@amd.com >
(cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)
Cc: stable@vger.kernel.org
2025-03-18 16:24:44 -04:00
..
2024-01-18 15:39:02 -05:00
2024-10-02 17:23:23 -04:00
2024-01-15 18:35:37 -05:00
2024-01-15 18:35:37 -05:00
2024-10-07 14:09:41 -04:00
2024-08-27 14:33:12 +02:00
2024-01-15 18:35:37 -05:00
2023-11-03 11:59:51 -04:00
2024-01-18 15:39:11 -05:00
2024-01-18 15:39:42 -05:00
2024-01-18 15:40:19 -05:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:40:15 -05:00
2024-01-18 15:40:13 -05:00
2023-11-17 09:29:54 -05:00
2023-07-27 14:47:29 -04:00
2023-12-13 15:28:31 -05:00
2024-07-23 17:31:59 -04:00
2024-08-27 14:33:12 +02:00
2024-05-23 14:37:24 +03:00
2024-01-18 15:39:55 -05:00
2024-01-18 15:40:17 -05:00
2024-07-23 17:31:59 -04:00
2024-11-20 13:59:34 +01:00
2024-01-18 15:38:42 -05:00
2024-01-18 15:39:53 -05:00
2024-01-22 16:56:28 -05:00
2024-01-18 15:38:59 -05:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:40:36 -05:00
2024-06-05 10:58:19 -04:00
2024-08-13 10:27:15 -04:00
2024-01-18 15:39:50 -05:00
2025-03-05 12:33:33 -05:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-10-01 17:41:09 -04:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:38:52 -05:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:39:16 -05:00
2025-03-05 12:33:33 -05:00
2024-07-27 17:35:10 -04:00
2024-01-18 15:38:46 -05:00
2024-12-16 18:02:08 +02:00
2024-01-18 15:39:27 -05:00
2023-09-28 16:54:54 -05:00
2024-07-27 17:35:10 -04:00
2024-11-21 15:56:23 -05:00
2024-11-20 13:59:34 +01:00
2024-10-18 09:23:03 +02:00
2024-07-27 17:35:10 -04:00
2024-12-05 12:35:42 +02:00
2024-12-05 12:35:42 +02:00
2024-10-15 11:25:01 -04:00
2024-10-18 09:23:03 +02:00
2024-07-23 17:31:59 -04:00
2023-07-25 13:37:05 -04:00
2024-11-20 13:59:34 +01:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-08-16 09:27:52 +02:00
2023-07-27 14:47:34 -04:00
2024-10-18 09:23:03 +02:00
2024-11-20 13:59:34 +01:00
2024-11-20 13:59:34 +01:00
2024-07-23 17:31:59 -04:00
2024-03-11 13:33:50 +01:00
2024-07-23 17:31:59 -04:00
2023-09-07 17:45:34 +02:00
2023-07-12 11:12:09 -04:00
2024-11-20 09:36:55 -05:00
2024-01-25 09:59:44 +01:00
2025-03-18 16:24:44 -04:00
2024-11-20 13:59:34 +01:00
2024-11-20 13:59:34 +01:00
2025-03-05 12:33:33 -05:00
2024-07-23 17:31:59 -04:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:39:14 -05:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:39:07 -05:00
2023-07-27 14:47:31 -04:00
2024-01-18 15:39:45 -05:00
2024-07-23 17:31:59 -04:00
2024-01-18 15:38:38 -05:00
2024-01-18 15:39:35 -05:00
2024-07-23 17:31:59 -04:00
2023-07-25 13:47:27 -04:00
2024-01-18 15:39:04 -05:00
2024-01-18 15:40:06 -05:00
2024-01-18 15:40:08 -05:00
2024-06-19 12:48:10 -04:00
2024-01-18 15:38:39 -05:00
2024-01-18 15:39:09 -05:00
2024-01-18 15:39:18 -05:00