]> git.baikalelectronics.ru Git - kernel.git/commit
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
authorGerd Hoffmann <kraxel@redhat.com>
Tue, 16 Feb 2016 13:25:00 +0000 (14:25 +0100)
committerDave Airlie <airlied@redhat.com>
Wed, 17 Feb 2016 04:16:06 +0000 (14:16 +1000)
commit64466e4755dd0fef3cedaa9df22e7a877362e8bd
treed50651f76c1b1c644dd5be5b96581e35514ddef4
parent4fa90b8403c874419f00b15e0c3c73f9d8d08449
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command

This avoids integer overflows on 32bit machines when calculating
reloc_info size, as reported by Alan Cox.

Cc: stable@vger.kernel.org
Cc: gnomes@lxorguk.ukuu.org.uk
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/qxl/qxl_ioctl.c