tree 5fce07ae2c9821fa3bd520fdf2cf8766171f89e5
parent 3a2b9faaaca3e462d123693c9371eba087632a50
author Dan Carpenter <dan.carpenter@oracle.com> 1530621056 +0300
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1535109159 +0200

drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

[ Upstream commit 7f073d011f93e92d4d225526b9ab6b8b0bbd6613 ]

The bo array has req->nr_buffers elements so the > should be >= so we
don't read beyond the end of the array.

Fixes: a1606a9596e5 ("drm/nouveau: new gem pushbuf interface, bump to 0.0.16")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>