On Mon, May 6, 2019 at 1:15 PM Oded Gabbay wrote:
>
> On Sat, May 4, 2019 at 4:56 PM Jann Horn wrote:
> >
> > This fixes multiple things in the habanalabs debugfs code, in particular:
> >
> > - mmu_write() was unnecessarily verbose, copying around between multiple
> >buffers
> > -
On Sat, May 4, 2019 at 4:56 PM Jann Horn wrote:
>
> This fixes multiple things in the habanalabs debugfs code, in particular:
>
> - mmu_write() was unnecessarily verbose, copying around between multiple
>buffers
> - mmu_write() could write a user-specified, unbounded amount of userspace
>
This fixes multiple things in the habanalabs debugfs code, in particular:
- mmu_write() was unnecessarily verbose, copying around between multiple
buffers
- mmu_write() could write a user-specified, unbounded amount of userspace
memory into a kernel buffer (out-of-bounds write)
-
3 matches
Mail list logo