| commit | 68c4fce737c4b963e336435f225621dc21138397 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Sun Sep 23 19:33:55 2012 +0300 |
| committer | Dave Airlie <airlied@gmail.com> | Wed Sep 26 18:40:06 2012 +1000 |
| tree | 4a651315ab08412d05490f66033ce738a8ac16e9 | |
| parent | 4f20d9ebb9c2a6b5db3d187595cbf437ee81d135 [diff] |
vmwgfx: corruption in vmw_event_fence_action_create() We don't allocate enough data for this struct. As soon as we start modifying event->event on the next lines, then we're going beyond the end of the memory we allocated. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> cc: stable@vger.kernel.org Signed-off-by: Dave Airlie <airlied@gmail.com>