From b816802daf6818306473c35d8776202c69fd0083 Mon Sep 17 00:00:00 2001 From: Jeff Hartmann Date: Mon, 16 Jul 2001 16:57:12 +0000 Subject: i810 drm security fix --- linux-core/i810_dma.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'linux-core/i810_dma.c') diff --git a/linux-core/i810_dma.c b/linux-core/i810_dma.c index 8abf80ad..75be5d0c 100644 --- a/linux-core/i810_dma.c +++ b/linux-core/i810_dma.c @@ -1229,6 +1229,8 @@ int i810_copybuf(struct inode *inode, struct file *filp, unsigned int cmd, buf_priv = buf->dev_private; if (buf_priv->currently_mapped != I810_BUF_MAPPED) return -EPERM; + if(d.used < 0 || d.used > buf->total) return -EINVAL; + if (copy_from_user(buf_priv->virtual, d.address, d.used)) return -EFAULT; -- cgit v1.2.3