git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9f1d036) | patch
drm/radeon: check incoming cliprects pointer
authorKees Cook <keescook@chromium.org>
Mon, 13 May 2013 05:00:51 +0000 (22:00 -0700)
committerDave Airlie <airlied@redhat.com>
Mon, 13 May 2013 05:23:34 +0000 (15:23 +1000)
commitfefaedcfb82d2e57c2320acf60604ab03b750cc0
tree527eeb56d4848a594c027750459636606c1c67e7tree | snapshot
parent9f1d036648c1c5ed81b0e98d7a06d55df972701ecommit | diff
drm/radeon: check incoming cliprects pointer

The "boxes" parameter points into userspace memory. It should be verified
like any other operation against user memory.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/radeon/r300_cmdbuf.c diff | blob | history
Pandora Kernel Repository