]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
DRM2: fix off-by-one overflow in ioctl processing
authordumbbell <dumbbell@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 28 Apr 2015 12:37:09 +0000 (12:37 +0000)
committerdumbbell <dumbbell@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Tue, 28 Apr 2015 12:37:09 +0000 (12:37 +0000)
commit8c961c5cc46ae9a9e71858bc519fea97a787f9dd
treee61e49d0cabec3e152abfbee1deb6def6c651786
parentee1a9a7d5d4c5ae2cfe1a7e895384f5e64eed856
DRM2: fix off-by-one overflow in ioctl processing

Call to the driver-specific ioctl used to process ioctl number
that will lead to the out-of-bounds access to the ioctl handler
array.

PR:             193367
Approved by:    kib
MFC of: r275209 (original commit by rea)

git-svn-id: svn://svn.freebsd.org/base/stable/10@282141 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/dev/drm2/drm_drv.c