Re: [RESEND][PATCH] drm/radeon: check incoming cliprects pointer

2013-05-13 Thread Alex Deucher
On Mon, May 13, 2013 at 1:00 AM, Kees Cook wrote: > The "boxes" parameter points into userspace memory. It should be verified > like any other operation against user memory. > > Signed-off-by: Kees Cook > Cc: sta...@vger.kernel.org Thanks. Applied. Alex > --- >

Re: [RESEND][PATCH] drm/radeon: check incoming cliprects pointer

2013-05-13 Thread Alex Deucher
On Mon, May 13, 2013 at 1:00 AM, Kees Cook keesc...@chromium.org wrote: The boxes parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook keesc...@chromium.org Cc: sta...@vger.kernel.org Thanks. Applied. Alex

[RESEND][PATCH] drm/radeon: check incoming cliprects pointer

2013-05-12 Thread Kees Cook
The "boxes" parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook Cc: sta...@vger.kernel.org --- drivers/gpu/drm/radeon/r300_cmdbuf.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[RESEND][PATCH] drm/radeon: check incoming cliprects pointer

2013-05-12 Thread Kees Cook
The boxes parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook keesc...@chromium.org Cc: sta...@vger.kernel.org --- drivers/gpu/drm/radeon/r300_cmdbuf.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff

[PATCH] drm/radeon: check incoming cliprects pointer

2013-03-11 Thread Kees Cook
The "boxes" parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook Cc: sta...@vger.kernel.org --- drivers/gpu/drm/radeon/r300_cmdbuf.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git

[PATCH] drm/radeon: check incoming cliprects pointer

2013-03-11 Thread Kees Cook
The boxes parameter points into userspace memory. It should be verified like any other operation against user memory. Signed-off-by: Kees Cook keesc...@chromium.org Cc: sta...@vger.kernel.org --- drivers/gpu/drm/radeon/r300_cmdbuf.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff