AuxXxilium/linux_dsm_epyc7002
1
0
Fork 0
mirror of https://github.com/AuxXxilium/linux_dsm_epyc7002.git synced 2024-12-20 06:08:41 +07:00
Code Issues Actions Packages Projects Releases Wiki Activity
0d9cac0ca0
linux_dsm_epyc7002/drivers/gpu/drm/vmwgfx
History
Dan Carpenter 0d9cac0ca0 drm/vmwgfx: Potential off by one in vmw_view_add() 
The vmw_view_cmd_to_type() function returns vmw_view_max (3) on error.
It's one element beyond the end of the vmw_view_cotables[] table.

My read on this is that it's possible to hit this failure.  header->id
comes from vmw_cmd_check() and it's a user controlled number between
1040 and 1225 so we can hit that error.  But I don't have the hardware
to test this code.

Fixes: d80efd5cb3 ("drm/vmwgfx: Initial DX support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
Cc: <stable@vger.kernel.org>
2018-01-10 15:21:39 +01:00
..
device_include License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
Kconfig drm: fix compilations issues introduced by "drm: allow to use mmuless SoC" 2017-01-09 11:30:30 +01:00
Makefile License cleanup: add SPDX GPL-2.0 license identifier to files with no license 2017-11-02 11:10:55 +01:00
vmwgfx_binding.c drm/vmwgfx: Initial DX support 2015-08-12 10:06:32 -07:00
vmwgfx_binding.h drm/vmwgfx: Initial DX support 2015-08-12 10:06:32 -07:00
vmwgfx_buffer.c drm/vmwgfx: dma-buf: Constify ttm_place structures. 2017-07-17 23:40:57 -07:00
vmwgfx_cmdbuf_res.c drm/vmwgfx: Fix NULL pointer comparison 2017-07-17 23:40:34 -07:00
vmwgfx_cmdbuf.c drm/vmwgfx: Fix incorrect command header offset at restart 2017-08-28 17:40:51 +02:00
vmwgfx_context.c Merge branch 'drm-vmwgfx-fixes' of git://people.freedesktop.org/~syeh/repos_linux into drm-fixes 2017-07-24 15:57:28 +10:00
vmwgfx_cotable.c Merge branch 'drm-vmwgfx-fixes' of git://people.freedesktop.org/~syeh/repos_linux into drm-fixes 2017-07-24 15:57:28 +10:00
vmwgfx_dmabuf.c drm/vmwgfx: Check pin count before attempting to move a buffer 2016-07-01 10:47:50 -07:00
vmwgfx_drv.c drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue 2017-11-01 10:56:53 -07:00
vmwgfx_drv.h drm/vmwgfx: Bump the version for fence FD support 2017-08-28 17:53:32 +02:00
vmwgfx_execbuf.c drm/vmwgfx: Potential off by one in vmw_view_add() 2018-01-10 15:21:39 +01:00
vmwgfx_fb.c drm/<drivers>: Drop fbdev info flags 2017-07-26 13:22:40 +02:00
vmwgfx_fence.c drm/vmwgfx: constify vmw_fence_ops 2017-11-01 10:45:43 -07:00
vmwgfx_fence.h drm/vmwgfx: Add support for imported Fence File Descriptor 2017-08-28 17:51:38 +02:00
vmwgfx_fifo.c drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve() 2017-06-07 12:07:35 +02:00
vmwgfx_gmr.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_gmrid_manager.c drm/ttm: make ttm_mem_type_manager_func debug more useful 2017-08-17 15:45:59 -04:00
vmwgfx_ioctl.c drm: Pass struct drm_file * to __drm_mode_object_find [v2] 2017-10-12 10:03:04 +10:00
vmwgfx_irq.c drm/vmwgfx: Move irq bottom half processing to threads 2017-08-28 17:40:43 +02:00
vmwgfx_kms.c drm/vmwgfx: Don't cache framebuffer maps 2018-01-09 15:33:42 +01:00
vmwgfx_kms.h drm/vmwgfx: Don't cache framebuffer maps 2018-01-09 15:33:42 +01:00
vmwgfx_ldu.c drm: Plumb modifiers through plane init 2017-08-01 17:50:06 +01:00
vmwgfx_marker.c drm: vmwgfx: Use nsec based interfaces 2014-07-23 15:01:50 -07:00
vmwgfx_mob.c drm/vmwgfx: Fix NULL pointer comparison 2017-07-17 23:40:34 -07:00
vmwgfx_msg.c Merge branch 'drm-vmwgfx-fixes' of git://people.freedesktop.org/~syeh/repos_linux into drm-fixes 2017-07-24 15:57:28 +10:00
vmwgfx_msg.h drm/vmwgfx: Add VMWare host messaging capability 2016-05-20 17:12:33 +02:00
vmwgfx_overlay.c drm/vmwgfx: Fix up user_dmabuf refcounting 2015-09-14 01:13:11 -07:00
vmwgfx_prime.c dma-buf: Rename dma-ops to prevent conflict with kunmap_atomic macro 2017-04-20 13:47:46 +05:30
vmwgfx_reg.h drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_resource_priv.h drm/vmwgfx: Introduce a simple resource type 2017-03-31 15:21:17 -07:00
vmwgfx_resource.c drm/vmwgfx: Fix NULL pointer comparison 2017-07-17 23:40:34 -07:00
vmwgfx_scrn.c drm: Reorganize drm_pending_event to support future event types [v2] 2017-10-21 07:23:40 +10:00
vmwgfx_shader.c Merge branch 'drm-vmwgfx-fixes' of git://people.freedesktop.org/~syeh/repos_linux into drm-fixes 2017-07-24 15:57:28 +10:00
vmwgfx_simple_resource.c drm/vmwgfx: Introduce a simple resource type 2017-03-31 15:21:17 -07:00
vmwgfx_so.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_so.h drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_stdu.c drm/vmwgfx: Don't cache framebuffer maps 2018-01-09 15:33:42 +01:00
vmwgfx_surface.c locking/atomics: COCCINELLE/treewide: Convert trivial ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE() 2017-10-25 11:01:08 +02:00
vmwgfx_ttm_glue.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_va.c drm/vmwgfx: Re-implement the stream resource as a simple resource. 2017-03-31 15:21:17 -07:00