drm/msm: Fix potential buffer overflow issue
authorKasin Li <donglil@codeaurora.org>
Mon, 19 Jun 2017 21:36:53 +0000 (15:36 -0600)
committerRob Clark <robdclark@gmail.com>
Mon, 19 Jun 2017 23:58:57 +0000 (19:58 -0400)
commit4a630fadbb29d9efaedb525f1a8f7449ad107641
tree20c23954ea7db38a5c7fdd4c5d9914dbf3c85950
parent51c9fbe69486c9143877f5d26a575b16588eb08a
drm/msm: Fix potential buffer overflow issue

In function submit_create, if nr_cmds or nr_bos is assigned with
negative value, the allocated buffer may be small than intended.
Using this buffer will lead to buffer overflow issue.

Signed-off-by: Kasin Li <donglil@codeaurora.org>
Signed-off-by: Jordan Crouse <jcrouse@codeaurora.org>
Signed-off-by: Rob Clark <robdclark@gmail.com>
drivers/gpu/drm/msm/msm_gem_submit.c