drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

commit 1abb264 upstream.

It malicious user provides a small pptable through sysfs and then
a bigger pptable, it may cause buffer overflow attack in function
smu_sys_set_pp_table().

Reviewed-by: Lijo Lazar <[email protected]>
Signed-off-by: Jiang Liu <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Cc: [email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
(cherry picked from commit 2498d2db1d35e88a2060ea191ae75dce853dd084)
Signed-off-by: Jack Vogel <[email protected]>

Author: jiangliu

drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c

@@ -607,7 +607,8 @@ static int smu_sys_set_pp_table(void *handle,
 		return -EIO;
 	}
 
-	if (!smu_table->hardcode_pptable) {
+	if (!smu_table->hardcode_pptable || smu_table->power_play_table_size < size) {
+		kfree(smu_table->hardcode_pptable);
 		smu_table->hardcode_pptable = kzalloc(size, GFP_KERNEL);
 		if (!smu_table->hardcode_pptable)
 			return -ENOMEM;