]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 734650a) | patch
vmwgfx: corruption in vmw_event_fence_action_create()
authorDan Carpenter <dan.carpenter@oracle.com>
Sun, 23 Sep 2012 16:33:55 +0000 (19:33 +0300)
committerDave Airlie <airlied@gmail.com>
Wed, 26 Sep 2012 08:40:06 +0000 (18:40 +1000)
commita34f061f774187551e07adc971c8347823d442f3
tree4a651315ab08412d05490f66033ce738a8ac16e9tree | snapshot
parent734650a7447214fdd96c42d220d6c13917a9031acommit | diff
vmwgfx: corruption in vmw_event_fence_action_create()

We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@gmail.com>
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c diff | blob | history
Linux Kernel Source Tree.