android_kernel_oneplus_msm8998/drivers/gpu/drm/qxl
Gerd Hoffmann b78bd121b4 drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
commit 34855706c30d52b0a744da44348b5d1cc39fbe51 upstream.

This avoids integer overflows on 32bit machines when calculating
reloc_info size, as reported by Alan Cox.

Cc: gnomes@lxorguk.ukuu.org.uk
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-03-03 15:07:23 -08:00
..
Kconfig
Makefile
qxl_cmd.c drm/qxl: Remove format string errors 2015-06-05 11:00:51 +10:00
qxl_debugfs.c
qxl_dev.h
qxl_display.c drm/qxl: avoid buffer reservation in qxl_crtc_page_flip 2015-10-07 15:33:06 +10:00
qxl_draw.c
qxl_drv.c drm/irq: Use unsigned int pipe in public API 2015-10-06 12:57:47 +02:00
qxl_drv.h drm/qxl: validate monitors config modes 2015-09-11 10:51:33 +10:00
qxl_dumb.c
qxl_fb.c drm/qxl: fix framebuffer dirty rectangle tracking. 2015-10-07 15:31:45 +10:00
qxl_gem.c drm/qxl: Move main reference counter to GEM object instead of TTM ones 2015-06-05 11:00:51 +10:00
qxl_image.c
qxl_ioctl.c drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command 2016-03-03 15:07:23 -08:00
qxl_irq.c
qxl_kms.c
qxl_object.c drm/qxl: Don't take dev->struct_mutex in bo_force_delete 2015-08-11 12:04:16 +02:00
qxl_object.h
qxl_prime.c
qxl_release.c drm/qxl: avoid dependency lock 2015-10-07 15:33:45 +10:00
qxl_ttm.c