[patch 4/4] drm/qxl: integer overflow in qxl_alloc_surf_ioctl()

> The size calculation can overflow. > > Signed-off-by: Dan Carpenter > > diff --git a/drivers/gpu/drm/qxl/qxl_ioctl.c > b/drivers/gpu/drm/qxl/qxl_ioctl.c > index 552dc06..5da9a60 100644 > --- a/drivers/gpu/drm/qxl/qxl_ioctl.c > +++ b/drivers/gpu/drm/qxl/qxl_ioctl.c > @@ -401,6 +401,8 @@ static

[patch 4/4] drm/qxl: integer overflow in qxl_alloc_surf_ioctl()

The size calculation can overflow. Signed-off-by: Dan Carpenter diff --git a/drivers/gpu/drm/qxl/qxl_ioctl.c b/drivers/gpu/drm/qxl/qxl_ioctl.c index 552dc06..5da9a60 100644 --- a/drivers/gpu/drm/qxl/qxl_ioctl.c +++ b/drivers/gpu/drm/qxl/qxl_ioctl.c @@ -401,6 +401,8 @@ static int qxl_alloc_surf_i