OSDN Git Service
(root)
/
sagit-ice-cold
/
kernel_xiaomi_msm8998.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
3f7e363
)
drm/radeon: fix use after free in ATRM bios reading code.
author
Dave Airlie
<airlied@redhat.com>
Thu, 2 Feb 2012 15:25:16 +0000
(15:25 +0000)
committer
Dave Airlie
<airlied@redhat.com>
Thu, 2 Feb 2012 15:25:16 +0000
(15:25 +0000)
Fixes:
https://bugs.freedesktop.org/show_bug.cgi?id=45503
Reported-and-Debugged-by: mlambda@gmail.com
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/radeon/radeon_atpx_handler.c
patch
|
blob
|
history
diff --git
a/drivers/gpu/drm/radeon/radeon_atpx_handler.c
b/drivers/gpu/drm/radeon/radeon_atpx_handler.c
index
13ac63b
..
98724fc
100644
(file)
--- a/
drivers/gpu/drm/radeon/radeon_atpx_handler.c
+++ b/
drivers/gpu/drm/radeon/radeon_atpx_handler.c
@@
-59,8
+59,9
@@
static int radeon_atrm_call(acpi_handle atrm_handle, uint8_t *bios,
obj = (union acpi_object *)buffer.pointer;
memcpy(bios+offset, obj->buffer.pointer, obj->buffer.length);
+ len = obj->buffer.length;
kfree(buffer.pointer);
- return
obj->buffer.length
;
+ return
len
;
}
bool radeon_atrm_supported(struct pci_dev *pdev)