i915: fix missing header when copying data from userspace

diff --git a/shared-core/i915_dma.c b/shared-core/i915_dma.c
index ed56308..287e95a 100644 (file)
--- a/shared-core/i915_dma.c
+++ b/shared-core/i915_dma.c
@@ -834,7 +834,7 @@ int i915_process_relocs(struct drm_file *file_priv,
                goto out;
        }
 
-       reloc_buf_size = reloc_count * I915_RELOC0_STRIDE * sizeof(uint32_t);
+       reloc_buf_size = (I915_RELOC_HEADER + (reloc_count * I915_RELOC0_STRIDE)) * sizeof(uint32_t);
        reloc_buf = kmalloc(reloc_buf_size, GFP_KERNEL);
        if (!reloc_buf) {
                DRM_ERROR("Out of memory for reloc buffer\n");