rpms/psb-kmod/devel psb-kmod-4.41.1-overflow.patch,1.1,1.2

Author: adamwill Update of /cvs/nonfree/rpms/psb-kmod/devel In directory se02.es.rpmfusion.net:/tmp/cvs-serv5698 Modified Files: psb-kmod-4.41.1-overflow.patch Log Message: - rediff overflow.patch psb-kmod-4.41.1-overflow.patch: drm_drv.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Index: psb-kmod-4.41.1-overflow.patch =================================================================== RCS file: /cvs/nonfree/rpms/psb-kmod/devel/psb-kmod-4.41.1-overflow.patch,v retrieving revision 1.1 retrieving revision 1.2 diff -u -r1.1 -r1.2 --- psb-kmod-4.41.1-overflow.patch 17 Sep 2010 12:23:36 -0000 1.1 +++ psb-kmod-4.41.1-overflow.patch 24 Sep 2010 14:30:37 -0000 1.2 @@ -1,11 +1,11 @@ ---- a/drm_drv.c -+++ b/drm_drv.c -@@ -649,7 +649,7 @@ long drm_unlocked_ioctl(struct file *filp, unsigned int cmd, unsigned long arg) +--- psb-kernel-source-4.41.1/drm_drv.c 2009-04-15 20:25:01.000000000 -0700 ++++ psb-kernel-source-4.41.1/drm_drv.c.new 2010-09-24 07:23:55.885426364 -0700 +@@ -649,7 +649,7 @@ - if (cmd & IOC_IN) { - if (copy_from_user(kdata, (void __user *)arg, -- _IOC_SIZE(cmd)) != 0) { + if (cmd & IOC_IN) { + if (copy_from_user(kdata, (void __user *)arg, +- _IOC_SIZE(cmd)) != 0) { + _IOC_SIZE(cmd) & 0x1ff) != 0) { - retcode = -EACCES; - goto err_i1; - } + retcode = -EACCES; + goto err_i1; + }