projects / platform / kernel / linux-stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 03c4c80) | patch
vmwgfx: corruption in vmw_event_fence_action_create()
authorDan Carpenter <dan.carpenter@oracle.com>
Sun, 23 Sep 2012 16:33:55 +0000 (19:33 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 2 Oct 2012 17:30:49 +0000 (10:30 -0700)
commit9a266f619f8b9994b0c2bd9bb79605ddfa4ac32a
treebc40e3a97250cc46f371081896b8dcd74c921794tree | snapshot
parent03c4c80ee30ae2c965cd838dd0f21c97a877366dcommit | diff
vmwgfx: corruption in vmw_event_fence_action_create()

commit 68c4fce737c4b963e336435f225621dc21138397 upstream.

We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Dave Airlie <airlied@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c diff | blob | history
Domain: System / Kernel;