patch-2.4.6 linux/drivers/char/drm/mga_state.c

• Lines: 25
• Date: Wed Jun 27 17:10:55 2001
• Orig file: v2.4.5/linux/drivers/char/drm/mga_state.c
• Orig date: Thu Jan 4 14:06:18 2001

diff -u --recursive --new-file v2.4.5/linux/drivers/char/drm/mga_state.c linux/drivers/char/drm/mga_state.c
@@ -832,6 +832,7 @@
 		return -EINVAL;
 	}
 
+	if(iload.idx < 0 || iload.idx > dma->buf_count) return -EINVAL;
 	buf = dma->buflist[iload.idx];
 	buf_priv = buf->dev_private;
 	bus_address = buf->bus_address;
@@ -874,6 +875,8 @@
 		return -EINVAL;
 	}
 
+	if(vertex.idx < 0 || vertex.idx > dma->buf_count) return -EINVAL;
+
 	buf = dma->buflist[vertex.idx];
 	buf_priv = buf->dev_private;
 
@@ -920,6 +923,7 @@
 		return -EINVAL;
 	}
 
+	if(indices.idx < 0 || indices.idx > dma->buf_count) return -EINVAL;
 	buf = dma->buflist[indices.idx];
 	buf_priv = buf->dev_private;