diff options
| author | Sinclair Yeh <syeh@vmware.com> | 2017-06-02 07:50:57 +0200 |
|---|---|---|
| committer | Thomas Hellstrom <thellstrom@vmware.com> | 2017-06-07 12:07:35 +0200 |
| commit | 07678eca2cf9c9a18584e546c2b2a0d0c9a3150c (patch) | |
| tree | 672fc9dfc28889f99da13104524ec09b7a7fb6ff /drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c | |
| parent | f0c62e9878024300319ba2438adc7b06c6b9c448 (diff) | |
| download | talos-op-linux-07678eca2cf9c9a18584e546c2b2a0d0c9a3150c.tar.gz talos-op-linux-07678eca2cf9c9a18584e546c2b2a0d0c9a3150c.zip | |
drm/vmwgfx: Make sure backup_handle is always valid
When vmw_gb_surface_define_ioctl() is called with an existing buffer,
we end up returning an uninitialized variable in the backup_handle.
The fix is to first initialize backup_handle to 0 just to be sure, and
second, when a user-provided buffer is found, we will use the
req->buffer_handle as the backup_handle.
Cc: <stable@vger.kernel.org>
Reported-by: Murray McAllister <murray.mcallister@insomniasec.com>
Signed-off-by: Sinclair Yeh <syeh@vmware.com>
Reviewed-by: Deepak Rawat <drawat@vmware.com>
Diffstat (limited to 'drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c')
0 files changed, 0 insertions, 0 deletions
