drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
authorGerd Hoffmann <kraxel@redhat.com>
Tue, 16 Feb 2016 13:25:00 +0000 (14:25 +0100)
committerDave Airlie <airlied@redhat.com>
Wed, 17 Feb 2016 04:16:06 +0000 (14:16 +1000)
commit34855706c30d52b0a744da44348b5d1cc39fbe51
treed50651f76c1b1c644dd5be5b96581e35514ddef4
parente8f051e9d8fe15d71d8d47c0d878d51bf5f864ad
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command

This avoids integer overflows on 32bit machines when calculating
reloc_info size, as reported by Alan Cox.

Cc: stable@vger.kernel.org
Cc: gnomes@lxorguk.ukuu.org.uk
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Dave Airlie <airlied@redhat.com>
drivers/gpu/drm/qxl/qxl_ioctl.c