| commit | fefaedcfb82d2e57c2320acf60604ab03b750cc0 | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Sun May 12 22:00:51 2013 -0700 |
| committer | Dave Airlie <airlied@redhat.com> | Mon May 13 15:23:34 2013 +1000 |
| tree | 527eeb56d4848a594c027750459636606c1c67e7 | |
| parent | 9f1d036648c1c5ed81b0e98d7a06d55df972701e [diff] |
drm/radeon: check incoming cliprects pointer The "boxes" parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook <keescook@chromium.org> Cc: stable@vger.kernel.org Signed-off-by: Dave Airlie <airlied@redhat.com>