tree 222c8cbf96f442329c2dc37ae7a986bc5e7e4c12
parent 955f3c334f0fb2b843efad5cc6d3b7e141e9d666
author Andrey Ryabinin <a.ryabinin@samsung.com> 1432549784 +0300
committer Daniel Vetter <daniel.vetter@ffwll.ch> 1432654312 +0200

drm/atomic: fix out of bounds read in for_each_*_in_state helpers

for_each_*_in_state validate array index after
access to array elements, thus perform out of bounds read.

Fix this by validating index in the first place and read
array element iff validation was successful.

Fixes: df63b9994eaf ("drm/atomic: Add for_each_{connector,crtc,plane}_in_state helper macros")
Signed-off-by: Andrey Ryabinin <a.ryabinin@samsung.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>