From: Dan Carpenter <dan.carpenter@oracle.com>
Subject: [patch 1/4] drm/qxl: integer overflow in qxl_process_single_command()
Date: Thu, 17 Sep 2015 14:23:11 +0300
Message-ID: <20150917112311.GA4882@mwanda>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <dri-devel-bounces@lists.freedesktop.org>
Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69])
 by gabe.freedesktop.org (Postfix) with ESMTPS id 34F6C6E666
 for <dri-devel@lists.freedesktop.org>; Thu, 17 Sep 2015 04:23:30 -0700 (PDT)
Content-Disposition: inline
List-Unsubscribe: <http://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <http://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <http://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: David Airlie <airlied@linux.ie>, Ilja Van Sprundel <ivansprundel@ioactive.com>
Cc: Dave Airlie <airlied@redhat.com>, security@kernel.org, dri-devel@lists.freedesktop.org, Frediano Ziglio <fziglio@redhat.com>
List-Id: dri-devel@lists.freedesktop.org

VGhpcyBzaXplIGNhbGN1bGF0aW9uIGNhbiBvdmVyZmxvdyBvbiAzMiBiaXQgc3lzdGVtcyBsZWFk
aW5nIHRvIG1lbW9yeQpjb3JydXB0aW9uLgoKUmVwb3J0ZWQtYnk6IElsamEgVmFuIFNwcnVuZGVs
IDxpdmFuc3BydW5kZWxAaW9hY3RpdmUuY29tPgpTaWduZWQtb2ZmLWJ5OiBEYW4gQ2FycGVudGVy
IDxkYW4uY2FycGVudGVyQG9yYWNsZS5jb20+CgpkaWZmIC0tZ2l0IGEvZHJpdmVycy9ncHUvZHJt
L3F4bC9xeGxfaW9jdGwuYyBiL2RyaXZlcnMvZ3B1L2RybS9xeGwvcXhsX2lvY3RsLmMKaW5kZXgg
YmRhNWM1Zi4uZWRhNmYzMCAxMDA2NDQKLS0tIGEvZHJpdmVycy9ncHUvZHJtL3F4bC9xeGxfaW9j
dGwuYworKysgYi9kcml2ZXJzL2dwdS9kcm0vcXhsL3F4bF9pb2N0bC5jCkBAIC0xNjgsNyArMTY4
LDcgQEAgc3RhdGljIGludCBxeGxfcHJvY2Vzc19zaW5nbGVfY29tbWFuZChzdHJ1Y3QgcXhsX2Rl
dmljZSAqcWRldiwKIAkJICAgICAgIGNtZC0+Y29tbWFuZF9zaXplKSkKIAkJcmV0dXJuIC1FRkFV
TFQ7CiAKLQlyZWxvY19pbmZvID0ga21hbGxvYyhzaXplb2Yoc3RydWN0IHF4bF9yZWxvY19pbmZv
KSAqIGNtZC0+cmVsb2NzX251bSwgR0ZQX0tFUk5FTCk7CisJcmVsb2NfaW5mbyA9IGttYWxsb2Nf
YXJyYXkoY21kLT5yZWxvY3NfbnVtLCBzaXplb2Yoc3RydWN0IHF4bF9yZWxvY19pbmZvKSwgR0ZQ
X0tFUk5FTCk7CiAJaWYgKCFyZWxvY19pbmZvKQogCQlyZXR1cm4gLUVOT01FTTsKIApfX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpkcmktZGV2ZWwgbWFpbGlu
ZyBsaXN0CmRyaS1kZXZlbEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKaHR0cDovL2xpc3RzLmZyZWVk
ZXNrdG9wLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2RyaS1kZXZlbAo=