Re: [PATCH] drm/virtio: fix OOB in virtio_gpu_object_create

2020-03-19 Thread Gerd Hoffmann
On Thu, Mar 19, 2020 at 11:04:21AM +0100, Jiri Slaby wrote: > After commit f651c8b05542, virtio_gpu_create_object allocates too small > space to fit everything in. It is because it allocates struct > virtio_gpu_object, but should allocate a newly added struct > virtio_gpu_object_shmem which has 2 m

[PATCH] drm/virtio: fix OOB in virtio_gpu_object_create

2020-03-19 Thread Jiri Slaby
After commit f651c8b05542, virtio_gpu_create_object allocates too small space to fit everything in. It is because it allocates struct virtio_gpu_object, but should allocate a newly added struct virtio_gpu_object_shmem which has 2 more members. So fix that by using correct type in virtio_gpu_create