Arto Merilainen 3364cd2890 gpu: host1x: Copy gathers before verification ...

The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>

2013-06-22 12:43:53 +02:00

13 KiB

Raw Blame History

View Raw