]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2abac8f) | patch
drm/radeon: check incoming cliprects pointer
authorKees Cook <keescook@chromium.org>
Mon, 13 May 2013 05:00:51 +0000 (22:00 -0700)
committerDave Airlie <airlied@redhat.com>
Mon, 13 May 2013 05:23:34 +0000 (15:23 +1000)
commit4c6c4e2c7af7248afa7cc4d6b905e06c40db50eb
tree527eeb56d4848a594c027750459636606c1c67e7tree | snapshot
parent2abac8f8c1bac4f09fd49751f151b26cd88ce608commit | diff
drm/radeon: check incoming cliprects pointer

The "boxes" parameter points into userspace memory. It should be verified
like any other operation against user memory.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/radeon/r300_cmdbuf.c diff | blob | history
Linux Kernel Source Tree.