diff options
Diffstat (limited to 'drivers/gpu/drm/qxl/qxl_ioctl.c')
| -rw-r--r-- | drivers/gpu/drm/qxl/qxl_ioctl.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/drivers/gpu/drm/qxl/qxl_ioctl.c b/drivers/gpu/drm/qxl/qxl_ioctl.c index 6e828158bcb0..d410e2925162 100644 --- a/drivers/gpu/drm/qxl/qxl_ioctl.c +++ b/drivers/gpu/drm/qxl/qxl_ioctl.c | |||
| @@ -163,8 +163,7 @@ static int qxl_process_single_command(struct qxl_device *qdev, | |||
| 163 | if (cmd->command_size > PAGE_SIZE - sizeof(union qxl_release_info)) | 163 | if (cmd->command_size > PAGE_SIZE - sizeof(union qxl_release_info)) |
| 164 | return -EINVAL; | 164 | return -EINVAL; |
| 165 | 165 | ||
| 166 | if (!access_ok(VERIFY_READ, | 166 | if (!access_ok(u64_to_user_ptr(cmd->command), |
| 167 | u64_to_user_ptr(cmd->command), | ||
| 168 | cmd->command_size)) | 167 | cmd->command_size)) |
| 169 | return -EFAULT; | 168 | return -EFAULT; |
| 170 | 169 | ||