On Wed, Apr 25, 2012 at 9:19 AM, Michel Dänzer <michel@xxxxxxxxxxx> wrote: > On Mit, 2012-04-25 at 14:46 +0200, Christian König wrote: >> Aligning offset can make it bigger than tmp->offset >> leading to an overrun bug in the following subtraction. >> >> Signed-off-by: Christian König <deathsimple@xxxxxxxxxxx> > > Please add > > Cc: stable@xxxxxxxxxxxxxxx > > to the commit log (but don't send the patch to that address during > review). That way, once Linus merges the fix, it'll be picked up for the > 3.3.y stable tree. > > With that addition, > > Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx> Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx> This should probably go in now via drm-fixes (with stable cced). Might fix: https://bugs.freedesktop.org/show_bug.cgi?id=45018 Alex > > > -- > Earthling Michel Dänzer | http://www.amd.com > Libre software enthusiast | Debian, X and DRI developer > _______________________________________________ > dri-devel mailing list > dri-devel@xxxxxxxxxxxxxxxxxxxxx > http://lists.freedesktop.org/mailman/listinfo/dri-devel _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/dri-devel
