drm/radeon: enforce use of radeon_get_ib_value when reading user cmd
authorJerome Glisse <jglisse@redhat.com>
Mon, 11 Feb 2013 13:57:18 +0000 (08:57 -0500)
committerDave Airlie <airlied@redhat.com>
Tue, 12 Feb 2013 06:56:25 +0000 (16:56 +1000)
commitde0babd60d8d43b58fd06a7803151d32cb589af0
tree4791ef696001b44741deb85c092c1cc43654ab6b
parente28f639eeaa97b6029b0db8890b2a4ce99e642c6
drm/radeon: enforce use of radeon_get_ib_value when reading user cmd

When ever parsing cmd buffer supplied by userspace we need to use
radeon_get_ib_value rather than directly accessing the ib as the user
cmd might not yet be copied into the ib thus the parser might read
value that does not correspond to what user is sending and possibly
allowing user to send malicious command undected.

Signed-off-by: Jerome Glisse <jglisse@redhat.com>
Reviewed-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/radeon/evergreen_cs.c
drivers/gpu/drm/radeon/r600_cs.c