Nikita Zhandarovich dd8689b52a
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() ...
On the off chance that command stream passed from userspace via
ioctl() call to radeon_vce_cs_parse() is weirdly crafted and
first command to execute is to encode (case 0x03000001), the function
in question will attempt to call radeon_vce_cs_reloc() with size
argument that has not been properly initialized. Specifically, 'size'
will point to 'tmp' variable before the latter had a chance to be
assigned any value.
Play it safe and init 'tmp' with 0, thus ensuring that
radeon_vce_cs_reloc() will catch an early error in cases like these.
Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.
Fixes: 2fc5703abdn.zhandarovich@fintech.ru >
Signed-off-by: Alex Deucher <alexander.deucher@amd.com >
(cherry picked from commit 2d52de55f9stable@vger.kernel.org
2025-03-18 16:24:44 -04:00
2025-02-21 09:16:35 +10:00
2025-03-04 20:45:34 +01:00
2025-02-20 15:20:11 +01:00
2025-03-01 08:59:29 -08:00
2025-01-24 08:03:52 -08:00
2025-02-20 13:26:30 +01:00
2025-03-07 11:12:33 -10:00
2025-02-27 16:50:05 -05:00
2025-02-20 15:22:02 +01:00
2025-01-28 13:48:37 +01:00
2025-02-20 15:19:07 +01:00
2025-03-09 09:07:54 -10:00
2025-01-26 18:36:23 -08:00
2025-02-17 23:27:49 +01:00
2025-02-06 20:39:43 +01:00
2025-01-30 15:10:34 -08:00
2025-02-14 18:39:19 -05:00
2025-01-29 11:23:22 -08:00
2025-01-13 20:48:34 +01:00
2025-03-02 10:08:45 -08:00
2025-02-14 20:36:11 +01:00
2025-01-12 13:44:27 +01:00
2025-01-28 12:25:12 -08:00
2025-02-28 08:47:21 -08:00
2025-01-09 10:56:57 +01:00
2025-03-06 15:51:27 +01:00
2025-03-18 16:24:44 -04:00
2025-03-05 07:46:59 -10:00
2025-01-28 13:48:37 +01:00
2025-03-03 06:04:34 -08:00
2025-02-20 09:35:57 +01:00
2025-02-26 23:28:41 +01:00
2025-01-24 15:48:01 -08:00
2025-02-28 22:04:26 +01:00
2025-02-08 12:46:32 +00:00
2025-02-23 06:57:56 -05:00
2025-01-24 07:18:39 -08:00
2025-01-16 14:01:40 +01:00
2025-02-28 12:19:01 +01:00
2025-02-21 09:47:06 +01:00
2025-01-28 12:25:12 -08:00
2025-01-26 18:36:23 -08:00
2025-01-18 16:20:55 -06:00
2025-02-24 16:29:48 -08:00
2025-02-01 09:15:01 -08:00
2025-01-15 19:07:39 +01:00
2025-01-27 16:51:51 -08:00
2025-01-10 15:20:30 -05:00
2025-02-11 14:53:39 +00:00
2025-02-27 12:24:53 -08:00
2025-02-03 13:34:50 +01:00
2025-02-19 14:38:47 +01:00
2025-01-10 10:15:04 +01:00
2025-03-06 10:33:07 +01:00
2025-01-18 17:10:05 -08:00
2025-01-18 14:38:49 -06:00
2025-03-05 10:37:01 -08:00
2025-01-10 16:16:48 +01:00
2025-02-26 13:39:28 -06:00
2025-01-28 12:25:12 -08:00
2025-02-14 16:49:07 -08:00
2025-01-28 13:48:37 +01:00
2025-02-14 18:03:05 +05:30
2025-02-06 10:13:15 +01:00
2025-03-07 12:17:42 -10:00
2025-01-21 10:45:24 +01:00
2025-02-03 12:41:18 +01:00
2025-02-07 12:43:58 +01:00
2025-01-10 16:12:33 +01:00
2025-02-11 10:20:52 +01:00
2025-01-28 12:25:12 -08:00
2025-03-05 21:36:19 -08:00
2025-01-08 10:59:44 +01:00
2025-02-11 16:29:01 +00:00
2025-01-15 10:04:27 -07:00
2025-01-24 14:56:59 -08:00
2025-01-30 17:50:02 -08:00
2025-02-20 10:19:54 -08:00
2025-02-20 21:20:58 -05:00
2025-02-20 15:19:51 +01:00
2025-02-20 22:29:05 +01:00
2025-01-29 14:38:19 -08:00
2025-02-06 11:33:51 +00:00
2025-01-17 12:58:49 +01:00
2025-01-28 12:25:12 -08:00
2025-02-03 16:28:51 -05:00
2025-02-14 15:17:34 +01:00
2025-02-25 12:30:45 +01:00
2025-01-28 12:25:12 -08:00
2025-02-16 12:50:44 -08:00
2025-02-20 22:18:24 -05:00
2025-01-27 16:51:51 -08:00
2025-03-06 16:55:46 +01:00
2025-01-27 15:26:06 -08:00
2025-01-28 14:16:46 -08:00
2025-03-01 02:52:52 -05:00
2025-01-24 11:32:13 -08:00
2025-03-09 09:07:54 -10:00
2025-01-27 15:26:06 -08:00
2025-01-09 10:54:19 +01:00
2025-01-25 16:19:10 -08:00
2025-02-14 08:15:17 -08:00
2025-01-08 18:04:36 +01:00
dd8689b52a