mirror of
https://github.com/hardkernel/linux.git
synced 2026-03-26 04:20:23 +09:00
BugLink: http://bugs.launchpad.net/bugs/1187551
commit fefaedcfb8 upstream.
The "boxes" parameter points into userspace memory. It should be verified
like any other operation against user memory.
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Steve Conklin <sconklin@canonical.com>