Murray McAllister 5ed7f4b5ec drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read ... If SVGA_3D_CMD_DX_SET_SHADER is called with a shader ID of SVGA3D_INVALID_ID, and a shader type of SVGA3D_SHADERTYPE_INVALID, the calculated binding.shader_slot will be 4294967295, leading to an out-of-bounds read in vmw_binding_loc() when the offset is calculated. Cc: <stable@vger.kernel.org> Fixes: d80efd5cb3 ("drm/vmwgfx: Initial DX support") Signed-off-by: Murray McAllister <murray.mcallister@gmail.com> Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com> Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>		2019-05-21 10:23:10 +02:00
..
device_include
Kconfig
Makefile
ttm_lock.c
ttm_lock.h
ttm_object.c	drm/vmwgfx: Fix user space handle equal to zero	2019-05-21 10:23:09 +02:00
ttm_object.h
vmwgfx_binding.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_binding.h	drm/vmwgfx: Be more restrictive when dirtying resources	2019-04-08 10:29:04 -07:00
vmwgfx_blit.c
vmwgfx_bo.c
vmwgfx_cmdbuf_res.c
vmwgfx_cmdbuf.c	drm/vmwgfx: Use VMW_DEBUG_USER for device command buffer errors	2019-04-08 10:29:05 -07:00
vmwgfx_context.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_cotable.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_drv.c	drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set	2019-05-21 10:22:40 +02:00
vmwgfx_drv.h	drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses	2019-05-21 10:23:09 +02:00
vmwgfx_execbuf.c	drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read	2019-05-21 10:23:10 +02:00
vmwgfx_fb.c	drm/vmwgfx: Remove set but not used variable 'fb_offset, fb_depth'	2019-04-08 10:29:05 -07:00
vmwgfx_fence.c
vmwgfx_fence.h
vmwgfx_fifo.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_gmr.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_gmrid_manager.c	drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's	2019-03-20 07:53:29 +01:00
vmwgfx_ioctl.c	drm/vmwgfx: Add a new define for vmwgfx user-space debugging	2019-04-08 10:29:04 -07:00
vmwgfx_irq.c
vmwgfx_kms.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_kms.h
vmwgfx_ldu.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_marker.c
vmwgfx_mob.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_msg.c
vmwgfx_msg.h
vmwgfx_overlay.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_prime.c
vmwgfx_reg.h
vmwgfx_resource_priv.h
vmwgfx_resource.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_scrn.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_shader.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_simple_resource.c	drm/vmwgfx: Add a new define for vmwgfx user-space debugging	2019-04-08 10:29:04 -07:00
vmwgfx_so.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_so.h	drm/vmwgfx: Be more restrictive when dirtying resources	2019-04-08 10:29:04 -07:00
vmwgfx_stdu.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_surface.c	drm/vmwgfx: Use preprocessor macro for FIFO allocation	2019-04-08 10:29:05 -07:00
vmwgfx_ttm_buffer.c	drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses	2019-05-21 10:23:09 +02:00
vmwgfx_ttm_glue.c	drm/ttm: Quick-test mmap offset in ttm_bo_mmap()	2019-03-19 15:03:53 -05:00
vmwgfx_va.c
vmwgfx_validation.c	drm/vmwgfx: Add a new define for vmwgfx user-space debugging	2019-04-08 10:29:04 -07:00
vmwgfx_validation.h	drm/vmwgfx: Be more restrictive when dirtying resources	2019-04-08 10:29:04 -07:00