linux-stable/drivers/gpu/drm/vmwgfx
Thomas Hellstrom 51ab70bed9 drm/vmwgfx: Limit the user-space command buffer size
With older hardware versions, the user could specify arbitrarily large
command buffer sizes, causing a vmalloc / vmap space exhaustion.

Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
Reviewed-by: Brian Paul <brianp@vmware.com>
Reviewed-by: Sinclair Yeh <syeh@vmware.com>
Signed-off-by: Sinclair Yeh <syeh@vmware.com>
Cc: stable@vger.kernel.org
2016-10-10 11:15:04 -07:00
..
device_include drm/vmwgfx: remove userland definition of DIV_ROUND_UP 2016-03-04 16:10:36 -05:00
Kconfig drm/vmwgfx: Only build on X86 2015-09-17 02:13:42 -07:00
Makefile drm/vmwgfx: Report vmwgfx version to vmware.log 2016-05-20 17:40:07 +02:00
vmwgfx_binding.c drm/vmwgfx: Initial DX support 2015-08-12 10:06:32 -07:00
vmwgfx_binding.h drm/vmwgfx: Initial DX support 2015-08-12 10:06:32 -07:00
vmwgfx_buffer.c drm/ttm: implement LRU add callbacks v2 2016-05-04 20:21:38 -04:00
vmwgfx_cmdbuf.c drm/vmwgfx: use *_32_bits() macros 2016-06-15 13:10:38 +02:00
vmwgfx_cmdbuf_res.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_context.c Merge branch 'vmwgfx-next' of git://people.freedesktop.org/~thomash/linux into drm-next 2015-08-17 16:03:48 +10:00
vmwgfx_cotable.c drm/ttm: remove lazy parameter from ttm_bo_wait 2016-05-04 20:21:26 -04:00
vmwgfx_dmabuf.c drm/vmwgfx: Check pin count before attempting to move a buffer 2016-07-01 10:47:50 -07:00
vmwgfx_drv.c drm/vmwgfx: Replace numeric parameter like 0444 with macro 2016-10-10 11:14:20 -07:00
vmwgfx_drv.h drm/vmwgfx: Enable SVGA_3D_CMD_DX_TRANSFER_FROM_BUFFER command 2016-10-10 11:15:01 -07:00
vmwgfx_execbuf.c drm/vmwgfx: Limit the user-space command buffer size 2016-10-10 11:15:04 -07:00
vmwgfx_fb.c drm/vmwgfx: Fix error paths when mapping framebuffer 2016-07-08 08:30:35 -07:00
vmwgfx_fence.c dma-buf/fence: make fence context 64 bit v2 2016-06-02 08:27:41 +02:00
vmwgfx_fence.h drm/vmwgfx: Nuke preclose hook 2016-02-08 09:55:53 +01:00
vmwgfx_fifo.c drm/vmwgfx: fix a warning message 2015-11-26 17:40:00 +01:00
vmwgfx_gmr.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_gmrid_manager.c drm/ttm: move fpfn and lpfn into each placement v2 2014-08-27 13:16:04 +02:00
vmwgfx_ioctl.c drm/vmwgfx: Replace iowrite/ioread with volatile memory accesses 2015-11-02 00:16:05 -08:00
vmwgfx_irq.c drm/vmwgfx: Relax irq locking somewhat 2015-11-06 16:15:40 +01:00
vmwgfx_kms.c Linux 4.7 2016-07-26 17:26:29 +10:00
vmwgfx_kms.h drm/core: Change declaration for gamma_set. 2016-06-07 15:30:09 +02:00
vmwgfx_ldu.c drm/vmwgfx: Calculate the cursor position based on the crtc gui origin 2016-03-14 14:59:10 +01:00
vmwgfx_marker.c
vmwgfx_mob.c drm/ttm: remove use_ticket parameter from ttm_bo_reserve 2016-05-04 20:21:21 -04:00
vmwgfx_msg.c drm/vmwgfx: Add a check to handle host message failure 2016-07-01 10:47:47 -07:00
vmwgfx_msg.h drm/vmwgfx: Add VMWare host messaging capability 2016-05-20 17:12:33 +02:00
vmwgfx_overlay.c drm/vmwgfx: Fix up user_dmabuf refcounting 2015-09-14 01:13:11 -07:00
vmwgfx_prime.c
vmwgfx_reg.h drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_resource.c drm/vmwgfx: Remove call to reservation_object_test_signaled_rcu before wait 2016-10-10 11:15:00 -07:00
vmwgfx_resource_priv.h drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_scrn.c drm/vmwgfx: Kill some lockdep warnings 2016-05-20 17:05:55 +02:00
vmwgfx_shader.c drm/ttm: remove use_ticket parameter from ttm_bo_reserve 2016-05-04 20:21:21 -04:00
vmwgfx_so.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_so.h drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00
vmwgfx_stdu.c drm/vmwgfx: Fix corner case screen target management 2016-07-01 10:47:51 -07:00
vmwgfx_surface.c drm/vmwgfx: check kmalloc return value 2015-12-15 13:37:57 +01:00
vmwgfx_ttm_glue.c drm/vmwgfx: Fix copyright headers 2015-08-12 10:06:56 -07:00