diff options
| author | Deepak Goyal <dgoyal@nvidia.com> | 2018-02-01 00:30:27 -0500 |
|---|---|---|
| committer | mobile promotions <svcmobile_promotions@nvidia.com> | 2018-02-06 13:01:48 -0500 |
| commit | 9402f4165b7a5568363f793e47bb893719639ca2 (patch) | |
| tree | 7f09cac7392366c77e5da83e3b4daabb6f023b83 /drivers/gpu/nvgpu/boardobj/boardobj.c | |
| parent | 0c0d6ba4880f841e26183c26637e54d7a7a9a4dc (diff) | |
gpu: nvgpu: fix out of bounds access
lsf_ucode_desc_v1 has more size than signature bin.
In memcpy(dest, src, size_to_copy) usage, "size_to_copy"
is more than "size of the src" which is causing out of bounds
access.
Bug 2051856
NVGPU-507
Change-Id: I0aad34df39f95f7e95ccb10539e1fae9f65361a8
Signed-off-by: Deepak Goyal <dgoyal@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1650140
Reviewed-by: Automatic_Commit_Validation_User
GVS: Gerrit_Virtual_Submit
Reviewed-by: Terje Bergstrom <tbergstrom@nvidia.com>
Reviewed-by: mobile promotions <svcmobile_promotions@nvidia.com>
Tested-by: mobile promotions <svcmobile_promotions@nvidia.com>
Diffstat (limited to 'drivers/gpu/nvgpu/boardobj/boardobj.c')
0 files changed, 0 insertions, 0 deletions