Commit c99769bc authored by Candice Li's avatar Candice Li Committed by Alex Deucher
Browse files

drm/amdgpu: Validate TA binary size 



Add TA binary size validation to avoid OOB write.

Signed-off-by: default avatarCandice Li <candice.li@amd.com>
Reviewed-by: default avatarHawking Zhang <Hawking.Zhang@amd.com>
Signed-off-by: default avatarAlex Deucher <alexander.deucher@amd.com>
(cherry picked from commit c0a04e35)
Cc: stable@vger.kernel.org
parent e3e4bf58

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

+3 −0
Original line number Diff line number Diff line
@@ -166,6 +166,9 @@ static ssize_t ta_if_load_debugfs_write(struct file *fp, const char *buf, size_t 
	if (ret)

		return -EFAULT;



	if (ta_bin_len > PSP_1_MEG)

		return -EINVAL;



	copy_pos += sizeof(uint32_t);



	ta_bin = kzalloc(ta_bin_len, GFP_KERNEL);