From mboxrd@z Thu Jan  1 00:00:00 1970
From: Dan Carpenter <dan.carpenter-QHcLZuEGTsvQT0dZR+AlfA@public.gmane.org>
Subject: [PATCH] drm/amdkfd: Integer overflows in ioctl
Date: Tue, 24 Apr 2018 16:35:49 +0300
Message-ID: <20180424133549.GB10167@mwanda>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <amd-gfx-bounces-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org>
Content-Disposition: inline
List-Unsubscribe: <https://lists.freedesktop.org/mailman/options/amd-gfx>,
 <mailto:amd-gfx-request-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org?subject=unsubscribe>
List-Archive: <https://lists.freedesktop.org/archives/amd-gfx>
List-Post: <mailto:amd-gfx-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org>
List-Help: <mailto:amd-gfx-request-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org?subject=help>
List-Subscribe: <https://lists.freedesktop.org/mailman/listinfo/amd-gfx>,
 <mailto:amd-gfx-request-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org?subject=subscribe>
Errors-To: amd-gfx-bounces-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org
Sender: "amd-gfx" <amd-gfx-bounces-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org>
To: Oded Gabbay <oded.gabbay-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>, Felix Kuehling <Felix.Kuehling-5C7GfCeVMHo@public.gmane.org>
Cc: "David (ChunMing) Zhou" <David1.Zhou-5C7GfCeVMHo@public.gmane.org>, David Airlie <airlied-cv59FeDIM0c@public.gmane.org>, kernel-janitors-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, amd-gfx-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org, dri-devel-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW@public.gmane.org, Alex Deucher <alexander.deucher-5C7GfCeVMHo@public.gmane.org>, Christian =?iso-8859-1?Q?K=F6nig?= <christian.koenig-5C7GfCeVMHo@public.gmane.org>
List-Id: dri-devel@lists.freedesktop.org
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