]> git.karo-electronics.de Git - karo-tx-linux.git/commit
gpu: host1x: Copy gathers before verification
authorArto Merilainen <amerilainen@nvidia.com>
Wed, 29 May 2013 10:26:05 +0000 (13:26 +0300)
committerThierry Reding <thierry.reding@gmail.com>
Sun, 9 Jun 2013 10:22:38 +0000 (12:22 +0200)
commitee1cb9b95f5d6431002a38c760dc1f1536491c75
tree3381224e00455c514c64bc24955c29a3740af87b
parent08a0188b0445784224c9508324e81d5ed4ee5e88
gpu: host1x: Copy gathers before verification

The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
drivers/gpu/host1x/job.c