Messages in this thread | | | Date | Wed, 24 Aug 2016 16:16:43 +0200 | From | Thierry Reding <> | Subject | Re: [PATCH] drm/tegra: Fix window[0] base address corruption |
| |
On Sun, Aug 21, 2016 at 11:57:58AM +0300, Dmitry Osipenko wrote: > Window uses shared stride for UV planes and tegra_dc_window struct > defines array of 2 strides per window. That's not taken in account > during setting up of the window addresses and strides, resulting in > out-of-bounds write of the 3-rd (non-existent) V plane stride that > overwrites Y plane base address. > > Signed-off-by: Dmitry Osipenko <digetx@gmail.com> > --- > drivers/gpu/drm/tegra/dc.c | 4 +++- > 1 file changed, 3 insertions(+), 1 deletion(-)
Applied and added a comment to the code why it is safe to do this.
Thanks, Thierry [unhandled content-type:application/pgp-signature] | |