mirrors/linux-stable
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2024-09-05 02:19:51 +00:00
Code Issues Releases Wiki Activity
linux-stable/drivers/gpu/drm/radeon
History
Marek Olšák a27bb4b209 drm/radeon/kms: do bounds checking for 3D_LOAD_VBPNTR and bump array limit 
To my knowledge, the limit is 16 on r300.
(the docs don't say what the limit is)

The lack of bounds checking can be abused to do all sorts of things
(from bypassing parts of the CS checker to crashing the kernel).

Bugzilla:
https://bugs.freedesktop.org/show_bug.cgi?id=36745

Cc: stable@kernel.org
Signed-off-by: Marek Olšák <maraeo@gmail.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
2011-06-14 10:59:03 +10:00
..
reg_srcs Merge branch 'drm-radeon-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6 2011-06-07 19:09:17 -07:00
.gitignore
atom-bits.h
atom-names.h
atom-types.h
atom.c drivers/gpu/drm/radeon/atom.c: fix warning 2011-05-24 09:00:37 +10:00
atom.h drm/radeon/kms: add ioport register access 2010-08-02 10:00:07 +10:00
atombios.h drm/radeon/kms: atombios.h updates for DP panel mode 2011-05-20 20:02:30 +10:00
atombios_crtc.c drm/radeon/kms: viewport height has to be even 2011-06-02 10:48:59 +10:00
atombios_dp.c drm/radeon/kms: simplify hotplug handler logic 2011-05-20 20:02:33 +10:00
avivod.h
cayman_blit_shaders.c drm/radeon/kms: add blit support for cayman (v2) 2011-05-26 09:19:31 +10:00
cayman_blit_shaders.h drm/radeon/kms: add blit support for cayman (v2) 2011-05-26 09:19:31 +10:00
evergreen.c drm/radeon: fix GUI idle IH debug statements 2011-06-09 14:36:48 +10:00
evergreen_blit_kms.c drm/radeon/kms: add support for Llano Fusion APUs 2011-06-02 10:47:40 +10:00
evergreen_blit_shaders.c drm/radeon/kms: evergreen/ni big endian fixes (v2) 2011-02-14 10:10:09 +10:00
evergreen_blit_shaders.h drm/radeon/kms: add drm blit support for evergreen 2010-10-06 11:46:30 +10:00
evergreen_cs.c Fix common misspellings 2011-03-31 11:26:23 -03:00
evergreen_reg.h drm/radeon/kms: add pageflip ioctl support (v3) 2010-11-22 11:51:08 +10:00
evergreend.h Merge branch 'drm-radeon-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6 2011-06-07 19:09:17 -07:00
Kconfig drm/radeon/kms: clean up the radeon kms Kconfig 2011-05-26 09:22:05 +10:00
Makefile drm/radeon/kms: add cayman CS check support 2011-03-03 11:56:56 +10:00
mkregtable.c radeon mkregtable: Add missing fclose() calls 2011-02-14 09:22:54 +10:00
ni.c Merge branch 'drm-radeon-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6 2011-06-07 19:09:17 -07:00
ni_reg.h drm/radeon/kms: add ni_reg.h 2011-01-07 14:11:38 +10:00
nid.h drm/radeon/kms/cayman: fix typo in register mask 2011-05-24 08:59:26 +10:00
ObjectID.h drm/radeon/kms: upstream ObjectID.h updates 2010-11-23 09:23:14 +10:00
r100.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial 2011-03-18 10:37:40 -07:00
r100_track.h drm/radeon/kms: do bounds checking for 3D_LOAD_VBPNTR and bump array limit 2011-06-14 10:59:03 +10:00
r100d.h drm/radeon: Definition of R_0003C2_GENMO_WT seems wrong 2010-12-21 12:55:33 +10:00
r200.c drm/radeon/kms: optimize CS state checking for r100->r500 2011-02-14 09:23:27 +10:00
r300.c Fix common misspellings 2011-03-31 11:26:23 -03:00
r300_cmdbuf.c
r300_reg.h Fix common misspellings 2011-03-31 11:26:23 -03:00
r300d.h drm/radeon/kms: manage r300 CMASK RAM access and allow CMASK clear 2011-01-06 13:00:45 +10:00
r420.c drm: Fix printk typo 'failled' 2011-02-17 16:52:46 +01:00
r420d.h
r500_reg.h drm/radeon/kms: add pageflip ioctl support (v3) 2010-11-22 11:51:08 +10:00
r520.c drm: Fix printk typo 'failled' 2011-02-17 16:52:46 +01:00
r520d.h
r600.c drm/radeon: fix GUI idle IH debug statements 2011-06-09 14:36:48 +10:00
r600_audio.c radeon: consolidate asic-specific function decls for r600 & later 2011-02-23 10:35:20 +10:00
r600_blit.c drm/radeon: 6xx/7xx non-kms endian fixes 2011-02-14 09:23:35 +10:00
r600_blit_kms.c Merge commit '5359533801e3dd3abca5b7d3d985b0b33fd9fe8b' into drm-core-next 2011-03-16 11:34:41 +10:00
r600_blit_shaders.c drm/radeon/kms: 6xx/7xx big endian fixes 2011-02-14 09:23:38 +10:00
r600_blit_shaders.h drm/radeon: add some missing copyright headers 2010-09-13 20:26:04 +10:00
r600_cp.c drm/radeon: 6xx/7xx non-kms endian fixes 2011-02-14 09:23:35 +10:00
r600_cs.c drm/radeon/kms: add missing Evergreen texture formats to the CS parser 2011-06-02 10:49:20 +10:00
r600_hdmi.c Fix common misspellings 2011-03-31 11:26:23 -03:00
r600_reg.h drm/radeon/kms: fix r6xx+ scanout on BE systems 2011-01-27 13:54:13 +10:00
r600d.h drm/radeon/kms: add missing Evergreen texture formats to the CS parser 2011-06-02 10:49:20 +10:00
radeon.h drm/radeon/kms: check modes against max pixel clock 2011-06-09 14:33:19 +10:00
radeon_acpi.c drm/radeon: tone down overchatty acpi debug messages. 2010-08-04 11:16:56 +10:00
radeon_agp.c drm/radeon/kms: fix agp mode setup on cards that use pcie bridges 2010-08-20 08:48:55 +10:00
radeon_asic.c drm/radeon/kms: fill in asic struct for llano 2011-06-02 10:47:38 +10:00
radeon_asic.h drm/radeon/kms: add radeon_asic entry for cayman 2011-03-03 11:56:50 +10:00
radeon_atombios.c drm/radeon/kms: check modes against max pixel clock 2011-06-09 14:33:19 +10:00
radeon_atpx_handler.c drm/radeon/kms: ATPX switcheroo fixes 2011-05-09 09:14:35 +10:00
radeon_benchmark.c drm/radeon: embed struct drm_gem_object 2011-02-23 10:33:03 +10:00
radeon_bios.c drm/radeon/kms: add disabled vbios accessor for NI asics 2011-01-07 14:11:30 +10:00
radeon_clocks.c drm/radeon/kms: check modes against max pixel clock 2011-06-09 14:33:19 +10:00
radeon_combios.c drm/radeon/kms: fix mac g5 quirk 2011-06-14 10:05:09 +10:00
radeon_connectors.c drm/radeon/kms: check modes against max pixel clock 2011-06-09 14:33:19 +10:00
radeon_cp.c Fix common misspellings 2011-03-31 11:26:23 -03:00
radeon_cs.c drm/radeon/kms: set family for use in parser. 2011-06-08 20:08:46 +10:00
radeon_cursor.c drm/radeon: fix order of doing things in radeon_crtc_cursor_set 2011-05-09 09:16:05 +10:00
radeon_device.c drm/radeon/kms: fix for radeon on systems >4GB without hardware iommu 2011-06-08 20:14:28 +10:00
radeon_display.c drm/radeon: fix oops in ttm reserve when pageflipping (v2) 2011-06-02 10:46:41 +10:00
radeon_drv.c drm/radeon/kms: disable hdmi audio by default 2011-06-08 20:14:41 +10:00
radeon_drv.h Fix common misspellings 2011-03-31 11:26:23 -03:00
radeon_encoders.c drm/radeon/kms/atom: fix PHY init 2011-06-05 16:34:13 +10:00
radeon_family.h drm/radeon/kms: add family ids for llano APUs 2011-06-02 10:47:37 +10:00
radeon_fb.c Merge remote branch 'intel/drm-intel-next' of ../drm-next into drm-core-next 2011-03-14 14:15:13 +10:00
radeon_fence.c Merge branch 'master' into for-next 2011-04-26 10:22:59 +02:00
radeon_gart.c drm/radeon/nouveau: fix build regression on alpha due to Xen changes. 2011-05-11 13:08:02 +10:00
radeon_gem.c drm/radeon: fixup refcounts in radeon dumb create ioctl. 2011-03-17 13:58:34 +10:00
radeon_i2c.c drm/radeon/kms: set i2c adapter class to I2C_CLASS_DDC 2011-05-04 13:21:24 +10:00
radeon_ioc32.c
radeon_irq.c drm: radeon: fix error value sign 2010-11-18 14:55:46 +10:00
radeon_irq_kms.c drm/radeon/kms: Initialize pageflip spinlocks. 2011-01-24 11:01:26 +10:00
radeon_kms.c drm/radeon/kms: fix gart setup on fusion parts (v2) 2011-05-04 10:16:40 +10:00
radeon_legacy_crtc.c drivers:video:aty:radeon_base Fix typo occationally to occasionally 2011-03-22 16:31:59 +09:00
radeon_legacy_encoders.c drm/radeon: Fix KMS legacy backlight support if CONFIG_BACKLIGHT_CLASS_DEVICE=m. 2011-04-09 16:20:36 +10:00
radeon_legacy_tv.c drm/radeon/kms: move a bunch of modesetting debug to correct debug usage. 2010-08-02 10:47:07 +10:00
radeon_mem.c
radeon_mode.h drm/radeon/kms/atom: move dig phy init out of modesetting 2011-05-24 08:59:30 +10:00
radeon_object.c drm/radeon: fix up dereferencing of busy objects. 2011-03-01 15:01:14 +10:00
radeon_object.h Fix common misspellings 2011-03-31 11:26:23 -03:00
radeon_pm.c drm/radeon/kms: add missing case for cayman thermal sensor 2011-05-26 09:19:34 +10:00
radeon_reg.h drm/radeon/kms: clean up some magic numbers 2011-01-27 13:53:30 +10:00
radeon_ring.c Merge branch 'master' into for-next 2011-04-26 10:22:59 +02:00
radeon_state.c Fix common misspellings 2011-03-31 11:26:23 -03:00
radeon_test.c drm/radeon: embed struct drm_gem_object 2011-02-23 10:33:03 +10:00
radeon_trace.h drm/radeon: add initial tracepoint support. 2010-12-16 14:37:47 +10:00
radeon_trace_points.c drm/radeon: add initial tracepoint support. 2010-12-16 14:37:47 +10:00
radeon_ttm.c Merge commit '5359533801e3dd3abca5b7d3d985b0b33fd9fe8b' into drm-core-next 2011-03-16 11:34:41 +10:00
rs100d.h
rs400.c drm: Fix printk typo 'failled' 2011-02-17 16:52:46 +01:00
rs400d.h
rs600.c drm/radeon/kms: add voltage type to atom set voltage function 2011-04-13 09:09:42 +10:00
rs600d.h
rs690.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial 2011-03-18 10:37:40 -07:00
rs690d.h
rv200d.h
rv250d.h
rv350d.h
rv515.c drm: Fix printk typo 'failled' 2011-02-17 16:52:46 +01:00
rv515d.h
rv770.c drm/radeon/kms: add voltage type to atom set voltage function 2011-04-13 09:09:42 +10:00
rv770d.h drm/radeon/kms: 6xx/7xx big endian fixes 2011-02-14 09:23:38 +10:00