Re: [PATCH] drm/vmwgfx: reject SURFACE_DMA commands smaller than body + suffix

From: Zack Rusin

Date: Wed Sep 23 2026 - 10:49:34 EST


On Wed, Sep 23, 2026 at 8:07 AM Aldo Ariel <qwe.aldo@xxxxxxxxx> wrote:
>
> Hi Zack,
>
> Gentle ping on this one -- vmw_cmd_dma() still dereferences the suffix
> without checking that header->size is large enough to contain it.

That's not correct:
https://gitlab.freedesktop.org/drm/misc/kernel/-/commit/f4f1db96bfd68b81053693ba53405b6f510ac16c

z

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature