Dan Carpenter a1de8d0a7e drm/i810: off by one in i810_dma_vertex() ...

If vertex->idx == dma->buf_count then we end up reading one element
beyond the end of the dma->buflist[] array.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180703123015.kma7v7rwtdy4urce@kili.mountain

2018-07-03 15:00:42 +02:00

..

i810_dma.c

drm/i810: off by one in i810_dma_vertex()

2018-07-03 15:00:42 +02:00

i810_drv.c

drm/pci: Deprecate drm_pci_init/exit completely

2017-06-20 10:41:03 +02:00

i810_drv.h

drm/i810: drop device_is_agp callback

2017-01-26 10:44:43 +01:00

Makefile

drm/i810: remove unneeded -Iinclude/drm compiler flag

2017-05-18 07:12:57 +02:00