Dan Carpenter 68c4fce737 vmwgfx: corruption in vmw_event_fence_action_create() ... We don't allocate enough data for this struct. As soon as we start modifying event->event on the next lines, then we're going beyond the end of the memory we allocated. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> cc: stable@vger.kernel.org Signed-off-by: Dave Airlie <airlied@gmail.com>		2012-09-26 18:40:06 +10:00
..
Kconfig	drm/vmwgfx: allow a kconfig option to choose if fbcon is enabled	2012-09-07 13:24:34 +10:00
Makefile
svga3d_reg.h
svga_escape.h
svga_overlay.h
svga_reg.h
svga_types.h
vmwgfx_buffer.c	drm/ttm: isolate dma data from ttm_tt V4	2011-12-06 10:40:02 +00:00
vmwgfx_dmabuf.c
vmwgfx_drv.c	vmwgfx: add dumb ioctl support	2012-09-13 11:42:31 +10:00
vmwgfx_drv.h	vmwgfx: add dumb ioctl support	2012-09-13 11:42:31 +10:00
vmwgfx_execbuf.c	vmwgfx: Make it possible to get fence from execbuf	2012-02-13 12:01:33 +00:00
vmwgfx_fb.c	vmwgfx: Pick up the initial size from the width and height regs	2012-02-13 12:01:35 +00:00
vmwgfx_fence.c	vmwgfx: corruption in vmw_event_fence_action_create()	2012-09-26 18:40:06 +10:00
vmwgfx_fence.h	vmwgfx: Move function declaration to correct header	2012-02-13 12:01:36 +00:00
vmwgfx_fifo.c	vmwgfx: Use the revised fifo hw version register when present	2011-12-19 14:06:00 +00:00
vmwgfx_gmr.c	drm/vmwgfx: Fix nasty write past alloced memory area	2012-06-01 17:00:20 +01:00
vmwgfx_gmrid_manager.c
vmwgfx_ioctl.c	vmwgfx: Remove dmabuf check in present ioctl	2011-12-19 14:06:01 +00:00
vmwgfx_irq.c
vmwgfx_kms.c	drm: stop vmgfx driver explosion	2012-08-22 09:26:50 +10:00
vmwgfx_kms.h	vmwgfx: Add page flip support	2012-02-13 12:01:35 +00:00
vmwgfx_ldu.c	vmwgfx: Pick up the initial size from the width and height regs	2012-02-13 12:01:35 +00:00
vmwgfx_marker.c
vmwgfx_overlay.c
vmwgfx_reg.h
vmwgfx_resource.c	vmwgfx: add dumb ioctl support	2012-09-13 11:42:31 +10:00
vmwgfx_scrn.c	vmwgfx: Pick up the initial size from the width and height regs	2012-02-13 12:01:35 +00:00
vmwgfx_ttm_glue.c