From mboxrd@z Thu Jan  1 00:00:00 1970
From: Dan Carpenter <dan.carpenter@oracle.com>
Subject: [patch 4/4] drm/amdgpu: integer overflow in amdgpu_mode_dumb_create()
Date: Wed, 23 Sep 2015 14:00:59 +0300
Message-ID: <20150923110059.GD16158@mwanda>
References: <13E61BCA7787794E89BDF39B8DE40C024D12E9F63F@ioaexchange.ioactive.local>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <dri-devel-bounces@lists.freedesktop.org>
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69])
 by gabe.freedesktop.org (Postfix) with ESMTPS id CB7B06ED21
 for <dri-devel@lists.freedesktop.org>; Wed, 23 Sep 2015 04:01:17 -0700 (PDT)
Content-Disposition: inline
In-Reply-To: <13E61BCA7787794E89BDF39B8DE40C024D12E9F63F@ioaexchange.ioactive.local>
List-Unsubscribe: <http://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <http://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <http://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: David Airlie <airlied@linux.ie>
Cc: security@kernel.org, Marek =?utf-8?B?T2zFocOhaw==?= <marek.olsak@amd.com>, Ilja Van Sprundel <ivansprundel@ioactive.com>, dri-devel@lists.freedesktop.org, Alex Deucher <alexander.deucher@amd.com>, Leo Liu <leo.liu@amd.com>, Christian =?iso-8859-1?Q?K=F6nig?= <christian.koenig@amd.com>, "monk.liu" <monk.liu@amd.com>
List-Id: dri-devel@lists.freedesktop.org
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