]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 82ed1b6) | patch
vmwgfx: corruption in vmw_event_fence_action_create()
authorDan Carpenter <dan.carpenter@oracle.com>
Sun, 23 Sep 2012 16:33:55 +0000 (19:33 +0300)
committerDave Airlie <airlied@gmail.com>
Wed, 26 Sep 2012 08:40:06 +0000 (18:40 +1000)
commit72be88df866dfe2920e941355b2405bad1cd14f4
tree4a651315ab08412d05490f66033ce738a8ac16e9tree | snapshot
parent82ed1b60b54241e7c1599f38c2a1939fd2480c71commit | diff
vmwgfx: corruption in vmw_event_fence_action_create()

We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@gmail.com>
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c diff | blob | history
Linux Kernel Source Tree.