diff options
| author | Asad Kamal <asad.kamal@amd.com> | 2026-05-12 15:44:32 +0800 |
|---|---|---|
| committer | Alex Deucher <alexander.deucher@amd.com> | 2026-06-03 13:52:44 -0400 |
| commit | f193e71fa9fab2e68ef85201b106e8f580d3a25b (patch) | |
| tree | e25085235517cdabd0c108a820a0f7c30f40bc64 /include/linux | |
| parent | 2064610469c5f7f5d665034ddd4c4365dff65f58 (diff) | |
drm/amd/pm: bound pp_dpm_set_pp_table() memcpy
The powerplay path allocates hardcode_pp_table once with kmemdup(...,
soft_pp_table_size). memcpy(..., size) used the sysfs store count (up to
PAGE_SIZE) with no upper bound, causing heap overflow. Reject
writes where size exceeds soft_pp_table_size.
Signed-off-by: Asad Kamal <asad.kamal@amd.com>
Reviewed-by: Yang Wang <kevinyang.wang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions
