-
由 Dan Carpenter 提交于
There is no limit on args->data.data_size_bytes so we could read beyond the end of the args->data.data[] array. Reviewed-by: NChristian König <christian.koenig@amd.com> Reported-by: NIlja Van Sprundel <ivansprundel@ioactive.com> Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com> Signed-off-by: NAlex Deucher <alexander.deucher@amd.com>
0913eab6