On Mit, 2012-04-25 at 14:46 +0200, Christian König wrote: > Aligning offset can make it bigger than tmp->offset > leading to an overrun bug in the following subtraction. > > Signed-off-by: Christian König <deathsimple@xxxxxxxxxxx> Please add Cc: stable@xxxxxxxxxxxxxxx to the commit log (but don't send the patch to that address during review). That way, once Linus merges the fix, it'll be picked up for the 3.3.y stable tree. With that addition, Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx> -- Earthling Michel Dänzer | http://www.amd.com Libre software enthusiast | Debian, X and DRI developer _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/dri-devel
