]> git.hungrycats.org Git - linux/commit
projects / linux / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d175740) | patch
vmwgfx: corruption in vmw_event_fence_action_create()
authorDan Carpenter <dan.carpenter@oracle.com>
Sun, 23 Sep 2012 16:33:55 +0000 (19:33 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 2 Oct 2012 17:40:03 +0000 (10:40 -0700)
commit56015aefc7a036e7a6156a2b5b3eb6e975354e86
tree1fb3ed205815707b1a2f6985f9bf3392ef83f473tree | snapshot
parentd1757408bfe3adca81ff1c88fcb2d578864f8e9dcommit | diff
vmwgfx: corruption in vmw_event_fence_action_create()

commit 68c4fce737c4b963e336435f225621dc21138397 upstream.

We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Dave Airlie <airlied@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/vmwgfx/vmwgfx_fence.c diff | blob | history
Linux kernels and configurations used by Zygo.