]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
authorGerd Hoffmann <kraxel@redhat.com>
Tue, 16 Feb 2016 13:25:00 +0000 (14:25 +0100)
committerSasha Levin <sasha.levin@oracle.com>
Fri, 4 Mar 2016 15:25:44 +0000 (10:25 -0500)
commit1d1338cfb7c94ffa41b3839a31c5ae332315131e
treee07f1ca1d8885b74e76d1631c64a743dd9d3a56b
parent1a82e899582acee9df55a271fb8d6bb73de49fea
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command

[ Upstream commit 34855706c30d52b0a744da44348b5d1cc39fbe51 ]

This avoids integer overflows on 32bit machines when calculating
reloc_info size, as reported by Alan Cox.

Cc: stable@vger.kernel.org
Cc: gnomes@lxorguk.ukuu.org.uk
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
drivers/gpu/drm/qxl/qxl_ioctl.c