Adam Jackson e883c170c1 glx: Pass remaining request length into ->varsize (v2) [CVE-2014-8098 8/8] ...

v2: Handle more multiplies in indirect_reqsize.c (Julien Cristau)

Reviewed-by: Julien Cristau <jcristau@debian.org>
Reviewed-by: Michal Srb <msrb@suse.com>
Reviewed-by: Andy Ritger <aritger@nvidia.com>
Signed-off-by: Adam Jackson <ajax@redhat.com>
Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>

2014-12-08 18:09:50 -08:00

21 KiB

Raw Blame History

View Raw