commit 7c4eaca4162d0b5ad4fb39f974d7ffd71b9daa09
author Jakob Bornecrantz <jakob@vmware.com> Thu Aug 16 08:29:03 2012 +0000
committer Dave Airlie <airlied@redhat.com> Fri Aug 24 09:38:40 2012 +1000
tree 1b1851a45b209cdc24489866326bc987c0c22315
parent 22f5d115a2b087c977128f84ee557ad71530330e

drm: Check for invalid cursor flags

Signed-off-by: Jakob Bornecrantz <jakob@vmware.com>
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>

drivers/gpu/drm/drm_crtc.c

diff --git a/drivers/gpu/drm/drm_crtc.c b/drivers/gpu/drm/drm_crtc.c
index 08a7aa7..6fbfc24 100644
--- a/drivers/gpu/drm/drm_crtc.c
+++ b/drivers/gpu/drm/drm_crtc.c
@@ -1981,7 +1981,7 @@
 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
 		return -EINVAL;
 
-	if (!req->flags)
+	if (!req->flags || (~DRM_MODE_CURSOR_FLAGS & req->flags))
 		return -EINVAL;
 
 	mutex_lock(&dev->mode_config.mutex);