diff options
| author | Arto Merilainen <amerilainen@nvidia.com> | 2013-05-29 13:26:05 +0300 |
|---|---|---|
| committer | Thierry Reding <thierry.reding@gmail.com> | 2013-06-22 12:43:53 +0200 |
| commit | 3364cd28906d87f0c77754998679bb66639d4112 (patch) | |
| tree | fdd2d07872db8694df523fb64bc8779fe9f55f23 /init | |
| parent | afac0e43c6c98473cce18fdeb5f7dda86dcf244f (diff) | |
| download | lwn-3364cd28906d87f0c77754998679bb66639d4112.tar.gz lwn-3364cd28906d87f0c77754998679bb66639d4112.zip | |
gpu: host1x: Copy gathers before verification
The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.
This patch makes the buffer validation occur after copying the
buffers.
Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions