]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/msm: Fix missing VM_BIND offset/range validation
authorRob Clark <robin.clark@oss.qualcomm.com>
Thu, 21 Aug 2025 00:04:26 +0000 (17:04 -0700)
committerRob Clark <robin.clark@oss.qualcomm.com>
Sat, 6 Sep 2025 15:58:11 +0000 (08:58 -0700)
commit3a3bef68a6c15d079646a964ebc4dc8bb0aedb06
tree7fbfde597ab38afbd92693976907142b1091693c
parent278f8904434aa96055e793936b5977c010549e28
drm/msm: Fix missing VM_BIND offset/range validation

We need to reject the MAP op if offset+range is larger than the BO size.

Reported-by: Connor Abbott <cwabbott0@gmail.com>
Fixes: 2e6a8a1fe2b2 ("drm/msm: Add VM_BIND ioctl")
Signed-off-by: Rob Clark <robin.clark@oss.qualcomm.com>
Tested-by: Connor Abbott <cwabbott0@gmail.com>
Patchwork: https://patchwork.freedesktop.org/patch/669781/
drivers/gpu/drm/msm/msm_gem_vma.c