| commit | 3364cd28906d87f0c77754998679bb66639d4112 | |
| author | Arto Merilainen <amerilainen@nvidia.com> | |
| Wed, 29 May 2013 10:26:05 +0000 (29 13:26 +0300) | ||
| committer | Thierry Reding <thierry.reding@gmail.com> | |
| Sat, 22 Jun 2013 10:43:53 +0000 (22 12:43 +0200) | ||
| tree | fdd2d07872db8694df523fb64bc8779fe9f55f23 | treesnapshot (tar.gz zip) |
| parent | afac0e43c6c98473cce18fdeb5f7dda86dcf244f | commitdiff |
gpu: host1x: Copy gathers before verification
The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.
This patch makes the buffer validation occur after copying the
buffers.
Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.
This patch makes the buffer validation occur after copying the
buffers.
Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
| drivers/gpu/host1x/job.c | diffblobblamehistory |