diff options
| author | Roel Kluin <roel.kluin@gmail.com> | 2009-08-03 14:22:53 +0200 |
|---|---|---|
| committer | Dave Airlie <airlied@redhat.com> | 2009-08-04 13:41:05 +1000 |
| commit | c96e7c7a3a79931446ecf9494a8415e4d164ebd8 (patch) | |
| tree | 5c809a9214cb85b862b0e2c24b6e21c422dd128e /drivers/gpu | |
| parent | fa99239cb73dbf419bea9f334b85ba94ac88a532 (diff) | |
| download | op-kernel-dev-c96e7c7a3a79931446ecf9494a8415e4d164ebd8.zip op-kernel-dev-c96e7c7a3a79931446ecf9494a8415e4d164ebd8.tar.gz | |
drm/ttm: Read buffer overflow
Check whether index is within bounds before grabbing the element.
Signed-off-by: Roel Kluin <roel.kluin@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Diffstat (limited to 'drivers/gpu')
| -rw-r--r-- | drivers/gpu/drm/ttm/ttm_bo.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/drivers/gpu/drm/ttm/ttm_bo.c b/drivers/gpu/drm/ttm/ttm_bo.c index aa82d53..c2b0d71 100644 --- a/drivers/gpu/drm/ttm/ttm_bo.c +++ b/drivers/gpu/drm/ttm/ttm_bo.c @@ -1182,13 +1182,14 @@ static int ttm_bo_force_list_clean(struct ttm_bo_device *bdev, int ttm_bo_clean_mm(struct ttm_bo_device *bdev, unsigned mem_type) { - struct ttm_mem_type_manager *man = &bdev->man[mem_type]; + struct ttm_mem_type_manager *man; int ret = -EINVAL; if (mem_type >= TTM_NUM_MEM_TYPES) { printk(KERN_ERR TTM_PFX "Illegal memory type %d\n", mem_type); return ret; } + man = &bdev->man[mem_type]; if (!man->has_type) { printk(KERN_ERR TTM_PFX "Trying to take down uninitialized " |
