]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5a01009) | patch
gpu: host1x: Copy gathers before verification
authorArto Merilainen <amerilainen@nvidia.com>
Wed, 29 May 2013 10:26:05 +0000 (13:26 +0300)
committerThierry Reding <thierry.reding@gmail.com>
Sat, 22 Jun 2013 10:43:53 +0000 (12:43 +0200)
commitf914bd6e00511bc40d26da065893994a44ed529a
treefdd2d07872db8694df523fb64bc8779fe9f55f23tree | snapshot
parent5a01009e87c85ad2b189820515d333608948346ccommit | diff
gpu: host1x: Copy gathers before verification

The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
drivers/gpu/host1x/job.c diff | blob | history
Linux Kernel Source Tree.