[patch] drm: crtc: integer overflow in drm_property_create_blob()

2015-10-29 Thread Dan Carpenter
The size here comes from the user via the ioctl, it is a number between 1-u32max so the addition here could overflow on 32 bit systems. Fixes: f453ba046074 ('DRM: add mode setting support') Signed-off-by: Dan Carpenter diff --git a/drivers/gpu/drm/drm_crtc.c b/drivers/gpu/drm/drm_crtc.c index e5

[patch] drm: crtc: integer overflow in drm_property_create_blob()

2015-10-29 Thread Daniel Stone
Hi Dan, On 29 October 2015 at 13:37, Dan Carpenter wrote: > The size here comes from the user via the ioctl, it is a number between > 1-u32max so the addition here could overflow on 32 bit systems. > > Fixes: f453ba046074 ('DRM: add mode setting support') > Signed-off-by: Dan Carpenter Thanks f