]> git.baikalelectronics.ru Git - kernel.git/commit
drm/i810: off by one in i810_dma_vertex()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 3 Jul 2018 12:30:16 +0000 (15:30 +0300)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Tue, 3 Jul 2018 13:00:42 +0000 (15:00 +0200)
commit69b2d93932d130d60a86dedec070f76b2f612ec7
treea43f73f9deb527ea99b3a799fb268a6ecee28685
parent25b410bd6aca430da73189cecea765a129590091
drm/i810: off by one in i810_dma_vertex()

If vertex->idx == dma->buf_count then we end up reading one element
beyond the end of the dma->buflist[] array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180703123015.kma7v7rwtdy4urce@kili.mountain
drivers/gpu/drm/i810/i810_dma.c