mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-05 16:54:27 +00:00
![]() In function submit_create, if nr_cmds or nr_bos is assigned with negative value, the allocated buffer may be small than intended. Using this buffer will lead to buffer overflow issue. Signed-off-by: Kasin Li <donglil@codeaurora.org> Signed-off-by: Jordan Crouse <jcrouse@codeaurora.org> Signed-off-by: Rob Clark <robdclark@gmail.com> |
||
---|---|---|
.. | ||
adreno | ||
dsi | ||
edp | ||
hdmi | ||
mdp | ||
Kconfig | ||
Makefile | ||
msm_atomic.c | ||
msm_debugfs.c | ||
msm_debugfs.h | ||
msm_drv.c | ||
msm_drv.h | ||
msm_fb.c | ||
msm_fbdev.c | ||
msm_fence.c | ||
msm_fence.h | ||
msm_gem.c | ||
msm_gem.h | ||
msm_gem_prime.c | ||
msm_gem_shrinker.c | ||
msm_gem_submit.c | ||
msm_gem_vma.c | ||
msm_gpu.c | ||
msm_gpu.h | ||
msm_iommu.c | ||
msm_kms.h | ||
msm_mmu.h | ||
msm_perf.c | ||
msm_rd.c | ||
msm_ringbuffer.c | ||
msm_ringbuffer.h | ||
NOTES |