Kees Cook fefaedcfb8 drm/radeon: check incoming cliprects pointer ...

The "boxes" parameter points into userspace memory. It should be verified
like any other operation against user memory.

Signed-off-by: Kees Cook <keescook@chromium.org>
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>

2013-05-13 15:23:34 +10:00

32 KiB

Raw Blame History

View Raw