From: Frediano Ziglio Subject: Re: [patch 1/4] drm/qxl: integer overflow in qxl_process_single_command() Date: Fri, 18 Sep 2015 05:50:09 -0400 (EDT) Message-ID: <1040276828.28678674.1442569809899.JavaMail.zimbra@redhat.com> References: <20150917112311.GA4882@mwanda> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mx6-phx2.redhat.com (mx6-phx2.redhat.com [209.132.183.39]) by gabe.freedesktop.org (Postfix) with ESMTPS id 0898F6ED9A for ; Fri, 18 Sep 2015 02:50:13 -0700 (PDT) In-Reply-To: <20150917112311.GA4882@mwanda> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: Dan Carpenter Cc: Dave Airlie , security@kernel.org, Ilja Van Sprundel , dri-devel@lists.freedesktop.org List-Id: dri-devel@lists.freedesktop.org PiAKPiBUaGlzIHNpemUgY2FsY3VsYXRpb24gY2FuIG92ZXJmbG93IG9uIDMyIGJpdCBzeXN0ZW1z IGxlYWRpbmcgdG8gbWVtb3J5Cj4gY29ycnVwdGlvbi4KPiAKPiBSZXBvcnRlZC1ieTogSWxqYSBW YW4gU3BydW5kZWwgPGl2YW5zcHJ1bmRlbEBpb2FjdGl2ZS5jb20+Cj4gU2lnbmVkLW9mZi1ieTog RGFuIENhcnBlbnRlciA8ZGFuLmNhcnBlbnRlckBvcmFjbGUuY29tPgo+IAo+IGRpZmYgLS1naXQg YS9kcml2ZXJzL2dwdS9kcm0vcXhsL3F4bF9pb2N0bC5jCj4gYi9kcml2ZXJzL2dwdS9kcm0vcXhs L3F4bF9pb2N0bC5jCj4gaW5kZXggYmRhNWM1Zi4uZWRhNmYzMCAxMDA2NDQKPiAtLS0gYS9kcml2 ZXJzL2dwdS9kcm0vcXhsL3F4bF9pb2N0bC5jCj4gKysrIGIvZHJpdmVycy9ncHUvZHJtL3F4bC9x eGxfaW9jdGwuYwo+IEBAIC0xNjgsNyArMTY4LDcgQEAgc3RhdGljIGludCBxeGxfcHJvY2Vzc19z aW5nbGVfY29tbWFuZChzdHJ1Y3QgcXhsX2RldmljZQo+ICpxZGV2LAo+ICAJCSAgICAgICBjbWQt PmNvbW1hbmRfc2l6ZSkpCj4gIAkJcmV0dXJuIC1FRkFVTFQ7Cj4gIAo+IC0JcmVsb2NfaW5mbyA9 IGttYWxsb2Moc2l6ZW9mKHN0cnVjdCBxeGxfcmVsb2NfaW5mbykgKiBjbWQtPnJlbG9jc19udW0s Cj4gR0ZQX0tFUk5FTCk7Cj4gKwlyZWxvY19pbmZvID0ga21hbGxvY19hcnJheShjbWQtPnJlbG9j c19udW0sIHNpemVvZihzdHJ1Y3QgcXhsX3JlbG9jX2luZm8pLAo+IEdGUF9LRVJORUwpOwo+ICAJ aWYgKCFyZWxvY19pbmZvKQo+ICAJCXJldHVybiAtRU5PTUVNOwo+ICAKPiAKCkxvb2tzIGZpbmUu CgpBY2tlZC4KCkZyZWRpYW5vCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCmRyaS1kZXZlbCBtYWlsaW5nIGxpc3QKZHJpLWRldmVsQGxpc3RzLmZyZWVkZXNr dG9wLm9yZwpodHRwOi8vbGlzdHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8vZHJp LWRldmVsCg==