[PATCH] drm: fix NULL pointer access by wrong ioctl

2014-06-30 Thread Sven Joachim
On 2014-06-18 08:33 +0200, Zhaowei Yuan wrote: > If user uses wrong ioctl command with _IOC_NONE and argument size > greater than 0, it can cause NULL pointer access from memset of line > 463. If _IOC_NONE, don't memset to 0 for kdata. > > Signed-off-by: Zhaowei Yuan > --- >

[PATCH] drm: fix NULL pointer access by wrong ioctl

2014-06-20 Thread David Herrmann
Hi On Wed, Jun 18, 2014 at 8:33 AM, Zhaowei Yuan wrote: > If user uses wrong ioctl command with _IOC_NONE and argument size > greater than 0, it can cause NULL pointer access from memset of line > 463. If _IOC_NONE, don't memset to 0 for kdata. > > Signed-off-by: Zhaowei Yuan Reviewed-by:

[PATCH] drm: fix NULL pointer access by wrong ioctl

2014-06-18 Thread Zhaowei Yuan
If user uses wrong ioctl command with _IOC_NONE and argument size greater than 0, it can cause NULL pointer access from memset of line 463. If _IOC_NONE, don't memset to 0 for kdata. Signed-off-by: Zhaowei Yuan --- drivers/gpu/drm/drm_drv.c |3 ++- 1 file changed, 2 insertions(+), 1

[PATCH] drm: fix NULL pointer access by wrong ioctl

2014-06-18 Thread y...@samsung.com
From: Zhaowei Yuan If user uses wrong ioctl command with _IOC_NONE and argument size greater than 0, it can cause NULL pointer access from memset of line 463. If _IOC_NONE, don't memset to 0 for kdata. Signed-off-by: Zhaowei Yuan --- drivers/gpu/drm/drm_drv.c |3