]> git.baikalelectronics.ru Git - kernel.git/commit
drm/i810: off by one in i810_dma_vertex()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 3 Jul 2018 12:30:16 +0000 (15:30 +0300)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Tue, 3 Jul 2018 13:00:42 +0000 (15:00 +0200)
commitd5ae37ab35d25b827736e7e208027518b5094e22
treea43f73f9deb527ea99b3a799fb268a6ecee28685
parentcbc83dc0efdf48f03312bdf1a93199966625877f
drm/i810: off by one in i810_dma_vertex()

If vertex->idx == dma->buf_count then we end up reading one element
beyond the end of the dma->buflist[] array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180703123015.kma7v7rwtdy4urce@kili.mountain
drivers/gpu/drm/i810/i810_dma.c