diff options
| author | Ian Forbes <ian.forbes@broadcom.com> | 2026-06-23 14:33:14 -0500 |
|---|---|---|
| committer | Zack Rusin <zack.rusin@broadcom.com> | 2026-07-21 11:44:53 -0400 |
| commit | a4f55260f7f7d4dc4d0ee55063dfb0c457b77991 (patch) | |
| tree | 8379d12afed00661871e4fcef1694edf2e8bea05 /rust/kernel/alloc/allocator | |
| parent | 0c9e6367639548307d3f578f6943ce72c9d39087 (diff) | |
drm/vmwgfx: Validate vmw_surface_metadata::array_size
This field comes from userspace and should be validated against specific
limits depending on which Shader Model (SM) is available.
Fixes: 504901dbb0b5 ("drm/vmwgfx: Refactor surface_define to use vmw_surface_metadata")
Reported-by: Zero Day Initiative <zdi-disclosures@trendmicro.com>
Cc: stable@vger.kernel.org
Signed-off-by: Ian Forbes <ian.forbes@broadcom.com>
Reviewed-by: Maaz Mombasawala <maaz.mombasawala@broadcom.com>
Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Link: https://patch.msgid.link/20260623193314.506257-1-ian.forbes@broadcom.com
Diffstat (limited to 'rust/kernel/alloc/allocator')
0 files changed, 0 insertions, 0 deletions