From mboxrd@z Thu Jan  1 00:00:00 1970
From: Dan Carpenter <dan.carpenter@oracle.com>
Subject: [patch 3/4] drm/qxl: array underflow in qxl_clientcap_ioctl()
Date: Thu, 17 Sep 2015 14:23:52 +0300
Message-ID: <20150917112352.GC4882@mwanda>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <dri-devel-bounces@lists.freedesktop.org>
Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81])
 by gabe.freedesktop.org (Postfix) with ESMTPS id 0AF076E686
 for <dri-devel@lists.freedesktop.org>; Thu, 17 Sep 2015 04:24:08 -0700 (PDT)
Content-Disposition: inline
List-Unsubscribe: <http://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <http://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <http://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: David Airlie <airlied@linux.ie>
Cc: Dave Airlie <airlied@redhat.com>, security@kernel.org, Ilja Van Sprundel <ivansprundel@ioactive.com>, dri-devel@lists.freedesktop.org, Frediano Ziglio <fziglio@redhat.com>
List-Id: dri-devel@lists.freedesktop.org
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