From mboxrd@z Thu Jan  1 00:00:00 1970
From: Rob Clark <robdclark@gmail.com>
Subject: [PATCH 2/2] drm/msm: protect against faults from copy_from_user() in
 submit ioctl
Date: Mon, 22 Aug 2016 15:38:05 -0400
Message-ID: <1471894685-20199-2-git-send-email-robdclark@gmail.com>
References: <1471894685-20199-1-git-send-email-robdclark@gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <dri-devel-bounces@lists.freedesktop.org>
In-Reply-To: <1471894685-20199-1-git-send-email-robdclark@gmail.com>
List-Unsubscribe: <https://lists.freedesktop.org/mailman/options/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=unsubscribe>
List-Archive: <https://lists.freedesktop.org/archives/dri-devel>
List-Post: <mailto:dri-devel@lists.freedesktop.org>
List-Help: <mailto:dri-devel-request@lists.freedesktop.org?subject=help>
List-Subscribe: <https://lists.freedesktop.org/mailman/listinfo/dri-devel>,
 <mailto:dri-devel-request@lists.freedesktop.org?subject=subscribe>
Errors-To: dri-devel-bounces@lists.freedesktop.org
Sender: "dri-devel" <dri-devel-bounces@lists.freedesktop.org>
To: dri-devel@lists.freedesktop.org
Cc: stable@vger.kernel.org, Al Viro <viro@zeniv.linux.org.uk>, Vaishali Thakkar <vaishali.thakkar@oracle.com>, freedreno@lists.freedesktop.org
List-Id: dri-devel@lists.freedesktop.org
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==