[PATCH] drm: fix NULL pointer access by wrong ioctl

On 2014-06-18 08:33 +0200, Zhaowei Yuan wrote: > If user uses wrong ioctl command with _IOC_NONE and argument size > greater than 0, it can cause NULL pointer access from memset of line > 463. If _IOC_NONE, don't memset to 0 for kdata. > > Signed-off-by: Zhaowei Yuan > --- > drivers/gpu/drm/drm_

[PATCH] drm: fix NULL pointer access by wrong ioctl

Hi On Wed, Jun 18, 2014 at 8:33 AM, Zhaowei Yuan wrote: > If user uses wrong ioctl command with _IOC_NONE and argument size > greater than 0, it can cause NULL pointer access from memset of line > 463. If _IOC_NONE, don't memset to 0 for kdata. > > Signed-off-by: Zhaowei Yuan Reviewed-by: Davi

[PATCH] drm: fix NULL pointer access by wrong ioctl

If user uses wrong ioctl command with _IOC_NONE and argument size greater than 0, it can cause NULL pointer access from memset of line 463. If _IOC_NONE, don't memset to 0 for kdata. Signed-off-by: Zhaowei Yuan --- drivers/gpu/drm/drm_drv.c |3 ++- 1 file changed, 2 insertions(+), 1 deletion

[PATCH] drm: fix NULL pointer access by wrong ioctl

From: Zhaowei Yuan If user uses wrong ioctl command with _IOC_NONE and argument size greater than 0, it can cause NULL pointer access from memset of line 463. If _IOC_NONE, don't memset to 0 for kdata. Signed-off-by: Zhaowei Yuan --- drivers/gpu/drm/drm_drv.c |3 ++- 1 file changed, 2 inse