[PATCH 4.2 019/110] drm: crtc: integer overflow in drm_property_create_blob()

4.2-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 9ac0934bbe52290e4e4c2a58ec41cab9b6ca8c96 upstream. The size here comes from the user via the ioctl, it is a number between 1-u32max so the addition here could overflow on

[PATCH 4.2 019/110] drm: crtc: integer overflow in drm_property_create_blob()

4.2-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 9ac0934bbe52290e4e4c2a58ec41cab9b6ca8c96 upstream. The size here comes from the user via the ioctl, it is a number between 1-u32max so the