summaryrefslogtreecommitdiff
path: root/linux/i810_dma.c
diff options
context:
space:
mode:
authorJeff Hartmann <jhartmann@valinux.com>2001-07-16 16:57:12 +0000
committerJeff Hartmann <jhartmann@valinux.com>2001-07-16 16:57:12 +0000
commitb816802daf6818306473c35d8776202c69fd0083 (patch)
treefa2ef75579f8edd5a89eee4986890510544be81c /linux/i810_dma.c
parent7ccc528911137156f216a13c95ce946c5f65af15 (diff)
i810 drm security fix
Diffstat (limited to 'linux/i810_dma.c')
-rw-r--r--linux/i810_dma.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/linux/i810_dma.c b/linux/i810_dma.c
index 8abf80ad..75be5d0c 100644
--- a/linux/i810_dma.c
+++ b/linux/i810_dma.c
@@ -1229,6 +1229,8 @@ int i810_copybuf(struct inode *inode, struct file *filp, unsigned int cmd,
buf_priv = buf->dev_private;
if (buf_priv->currently_mapped != I810_BUF_MAPPED) return -EPERM;
+ if(d.used < 0 || d.used > buf->total) return -EINVAL;
+
if (copy_from_user(buf_priv->virtual, d.address, d.used))
return -EFAULT;