Re: [PATCH] drm/vmwgfx: reject SURFACE_DMA commands smaller than body + suffix
From: Zack Rusin
Date: Wed Sep 23 2026 - 10:49:34 EST
On Wed, Sep 23, 2026 at 8:07 AM Aldo Ariel <qwe.aldo@xxxxxxxxx> wrote:
>
> Hi Zack,
>
> Gentle ping on this one -- vmw_cmd_dma() still dereferences the suffix
> without checking that header->size is large enough to contain it.
That's not correct:
https://gitlab.freedesktop.org/drm/misc/kernel/-/commit/f4f1db96bfd68b81053693ba53405b6f510ac16c
z
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature