]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 3 Jul 2018 12:30:56 +0000 (15:30 +0300)
committerJuerg Haefliger <juergh@canonical.com>
Wed, 24 Jul 2019 01:43:43 +0000 (19:43 -0600)
commita8ce5478bc2fbeea2689507ed454dbe558a75b9a
treee1b8df91924540f74b113f43435fdae024307acd
parent1903232a0790df4d1f9f7eb3048314f54f60d317
drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

BugLink: https://bugs.launchpad.net/bugs/1835845
[ Upstream commit 7f073d011f93e92d4d225526b9ab6b8b0bbd6613 ]

The bo array has req->nr_buffers elements so the > should be >= so we
don't read beyond the end of the array.

Fixes: a1606a9596e5 ("drm/nouveau: new gem pushbuf interface, bump to 0.0.16")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
drivers/gpu/drm/nouveau/nouveau_gem.c