From: Eric Anholt Subject: [PATCH 1/2] drm/vc4: Fix an integer overflow in temporary allocation layout. Date: Wed, 18 Jan 2017 07:20:49 +1100 Message-ID: <20170117202050.22408-1-eric@anholt.net> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from anholt.net (anholt.net [50.246.234.109]) by gabe.freedesktop.org (Postfix) with ESMTP id 5EBA16E71B for ; Tue, 17 Jan 2017 20:20:59 +0000 (UTC) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: dri-devel@lists.freedesktop.org Cc: linux-kernel@vger.kernel.org List-Id: dri-devel@lists.freedesktop.org V2UgY29weSB0aGUgdW52YWxpZGF0ZWQgaW9jdGwgYXJndW1lbnRzIGZyb20gdGhlIHVzZXIgaW50 byBrZXJuZWwKdGVtcG9yYXJ5IG1lbW9yeSB0byBydW4gdGhlIHZhbGlkYXRpb24gZnJvbSwgdG8g YXZvaWQgYSByYWNlIHdoZXJlIHRoZQp1c2VyIHVwZGF0ZXMgdGhlIHVudmFsaWRhdGUgY29udGVu dHMgaW4gYmV0d2VlbiB2YWxpZGF0aW5nIHRoZW0gYW5kCmNvcHlpbmcgdGhlbSBpbnRvIHRoZSB2 YWxpZGF0ZWQgQk8uCgpIb3dldmVyLCBpbiBzZXR0aW5nIHVwIHRoZSBsYXlvdXQgb2YgdGhlIGtl cm5lbCBzaWRlLCB3ZSBmYWlsZWQgdG8KY2hlY2sgb25lIG9mIHRoZSBhZGRpdGlvbnMgKHRoZSBy b3VuZHVwKCkgZm9yIHNoYWRlcl9yZWNfb2Zmc2V0KQphZ2FpbnN0IGludGVnZXIgb3ZlcmZsb3cs IGFsbG93aW5nIGEgbmVhcmx5IE1BWF9VSU5UIHZhbHVlIG9mCmJpbl9jbF9zaXplIHRvIGNhdXNl IHVzIHRvIHVuZGVyLWFsbG9jYXRlIHRoZSB0ZW1wb3Jhcnkgc3BhY2UgdGhhdCB3ZQp0aGVuIGNv cHlfZnJvbV91c2VyIGludG8uCgpSZXBvcnRlZC1ieTogTXVycmF5IE1jQWxsaXN0ZXIgPG11cnJh eS5tY2FsbGlzdGVyQGluc29tbmlhc2VjLmNvbT4KU2lnbmVkLW9mZi1ieTogRXJpYyBBbmhvbHQg PGVyaWNAYW5ob2x0Lm5ldD4KRml4ZXM6IGQ1YjFhNzhhNzcyZiAoImRybS92YzQ6IEFkZCBzdXBw b3J0IGZvciBkcmF3aW5nIDNEIGZyYW1lcy4iKQotLS0KIGRyaXZlcnMvZ3B1L2RybS92YzQvdmM0 X2dlbS5jIHwgMyArKy0KIDEgZmlsZSBjaGFuZ2VkLCAyIGluc2VydGlvbnMoKyksIDEgZGVsZXRp b24oLSkKCmRpZmYgLS1naXQgYS9kcml2ZXJzL2dwdS9kcm0vdmM0L3ZjNF9nZW0uYyBiL2RyaXZl cnMvZ3B1L2RybS92YzQvdmM0X2dlbS5jCmluZGV4IGRiOTIwNzcxYmZiNS4uYzVmZTM1NTQ4NThl IDEwMDY0NAotLS0gYS9kcml2ZXJzL2dwdS9kcm0vdmM0L3ZjNF9nZW0uYworKysgYi9kcml2ZXJz L2dwdS9kcm0vdmM0L3ZjNF9nZW0uYwpAQCAtNTk0LDcgKzU5NCw4IEBAIHZjNF9nZXRfYmNsKHN0 cnVjdCBkcm1fZGV2aWNlICpkZXYsIHN0cnVjdCB2YzRfZXhlY19pbmZvICpleGVjKQogCQkJCQkg IGFyZ3MtPnNoYWRlcl9yZWNfY291bnQpOwogCXN0cnVjdCB2YzRfYm8gKmJvOwogCi0JaWYgKHVu aWZvcm1zX29mZnNldCA8IHNoYWRlcl9yZWNfb2Zmc2V0IHx8CisJaWYgKHNoYWRlcl9yZWNfb2Zm c2V0IDwgYXJncy0+YmluX2NsX3NpemUgfHwKKwkgICAgdW5pZm9ybXNfb2Zmc2V0IDwgc2hhZGVy X3JlY19vZmZzZXQgfHwKIAkgICAgZXhlY19zaXplIDwgdW5pZm9ybXNfb2Zmc2V0IHx8CiAJICAg IGFyZ3MtPnNoYWRlcl9yZWNfY291bnQgPj0gKFVJTlRfTUFYIC8KIAkJCQkJICBzaXplb2Yoc3Ry dWN0IHZjNF9zaGFkZXJfc3RhdGUpKSB8fAotLSAKMi4xMS4wCgpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXwpkcmktZGV2ZWwgbWFpbGluZyBsaXN0CmRyaS1k ZXZlbEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0cHM6Ly9saXN0cy5mcmVlZGVza3RvcC5vcmcv bWFpbG1hbi9saXN0aW5mby9kcmktZGV2ZWwK