projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 64e625c) | patch
drm/i810: off by one in i810_dma_vertex()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 3 Jul 2018 12:30:16 +0000 (15:30 +0300)
committerDaniel Vetter <daniel.vetter@ffwll.ch>
Tue, 3 Jul 2018 13:00:42 +0000 (15:00 +0200)
commita1de8d0a7e2cc79dad6d469901b3b5d4c94c4554
treea43f73f9deb527ea99b3a799fb268a6ecee28685tree | snapshot
parent64e625cf53539fea4fcc5410d64c619fdbf3d225commit | diff
drm/i810: off by one in i810_dma_vertex()

If vertex->idx == dma->buf_count then we end up reading one element
beyond the end of the dma->buflist[] array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180703123015.kma7v7rwtdy4urce@kili.mountain
drivers/gpu/drm/i810/i810_dma.c diff | blob | history
Domain: System / Kernel;