From mboxrd@z Thu Jan  1 00:00:00 1970
From: Thomas Hellstrom <thellstrom@vmware.com>
Subject: [PATCH 6/6] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader()
 leading to an invalid read
Date: Tue, 21 May 2019 08:25:05 +0000
Message-ID: <20190521082345.27286-6-thellstrom@vmware.com>
References: <20190521082345.27286-1-thellstrom@vmware.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <stable-owner@vger.kernel.org>
In-Reply-To: <20190521082345.27286-1-thellstrom@vmware.com>
Content-Language: en-US
Sender: stable-owner@vger.kernel.org
To: "dri-devel@lists.freedesktop.org" <dri-devel@lists.freedesktop.org>
Cc: Murray McAllister <murray.mcallister@gmail.com>, "stable@vger.kernel.org" <stable@vger.kernel.org>, Thomas Hellstrom <thellstrom@vmware.com>
List-Id: dri-devel@lists.freedesktop.org
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==