projects / kernel / kernel-mfld-blackbay.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6dcf283) | patch
gfx: pvr: Move ioctl number check before first use
authorPauli Nieminen <pauli.nieminen@linux.intel.com>
Wed, 23 Nov 2011 19:06:25 +0000 (21:06 +0200)
committerMarkus Lehtonen <markus.lehtonen@linux.intel.com>
Tue, 3 Jul 2012 09:28:41 +0000 (12:28 +0300)
commit79389f0814fc1a24483ce3b194362f8f12fd882d
tree398ea38623bad8b90a1a1940b5afb24559503817tree | snapshot
parent6dcf28324ad58700a1cd4821d8fabaffa355c25ccommit | diff
gfx: pvr: Move ioctl number check before first use

Driver is using user provided ioctl number before checking if it is in
valid range. That makes it possible to force kernel to read memory past
the end of ioctl information array.

Signed-off-by: Pauli Nieminen <pauli.nieminen@linux.intel.com>
Acked-by: Imre Deak <imre.deak@intel.com>
Signed-off-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>
drivers/staging/mrst/pvr/services4/srvkm/bridged/bridged_pvr_bridge.c diff | blob | history
Domain: System / Kernel;