Matthew Auld 182e963432 drm/i915/userptr: reject zero user_size ...

commit c11c7bfd21 upstream.

Operating on a zero sized GEM userptr object will lead to explosions.

Fixes: 5cc9ed4b9a ("drm/i915: Introduce mapping of user pages into video memory (userptr) ioctl")
Testcase: igt/gem_userptr_blits/input-checking
Signed-off-by: Matthew Auld <matthew.auld@intel.com>
Cc: Chris Wilson <chris@chris-wilson.co.uk>
Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk>
Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk>
Link: https://patchwork.freedesktop.org/patch/msgid/20180502195021.30900-1-matthew.auld@intel.com
Cc: Loic <hackurx@opensec.fr>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-09 20:04:32 +02:00

..

amd

drm/amdgpu/dce: Don't turn off DP sink when disconnected

2018-03-22 09:23:31 +01:00

armada

drm/armada: fix colorkey mode property

2018-08-24 13:26:58 +02:00

ast

drm/ast: Handle configuration without P2A bridge

2017-07-05 14:37:15 +02:00

atmel-hlcdc

…

bochs

…

bridge

…

cirrus

…

exynos

drm/exynos: decon5433: Fix WINCONx reset value

2018-08-24 13:26:57 +02:00

fsl-dcu

…

gma500

drm/gma500: fix psb_intel_lvds_mode_valid()'s return type

2018-08-06 16:24:38 +02:00

i2c

drm/bridge: adv7511: Reset registers on hotplug

2018-09-05 09:18:34 +02:00

i810

…

i915

drm/i915/userptr: reject zero user_size

2018-09-09 20:04:32 +02:00

imx

drm/imx: imx-ldb: check if channel is enabled before printing warning

2018-09-05 09:18:34 +02:00

mga

…

mgag200

gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap

2017-11-21 09:21:21 +01:00

msm

drm/msm: fix leak in failed get_pages

2018-03-24 10:58:46 +01:00

nouveau

drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

2018-08-24 13:26:59 +02:00

omapdrm

drm/omap: fix tiled buffer stride calculations

2018-04-13 19:50:16 +02:00

panel

drm/panel: simple: Add missing panel_simple_unprepare() calls

2017-12-05 11:22:51 +01:00

qxl

drm: qxl: Don't alloc fbdev if emulation is not supported

2018-03-22 09:23:19 +01:00

r128

…

radeon

drm/radeon: fix mode_valid's return type

2018-08-06 16:24:35 +02:00

rcar-du

drm: rcar-du: Fix race condition when disabling planes at CRTC stop

2018-02-16 20:09:37 +01:00

rockchip

drm/rockchip: Respect page offset for PRIME mmap calls

2018-05-30 07:49:16 +02:00

savage

…

shmobile

…

sis

…

sti

drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache

2017-11-21 09:21:19 +01:00

tdfx

…

tegra

…

tilcdc

…

ttm

drm/ttm: check the return value of kzalloc

2018-03-03 10:19:44 +01:00

udl

udl-kms: fix crash due to uninitialized memory

2018-09-05 09:18:39 +02:00

vc4

…

vgem

…

via

…

virtio

virtio-gpu: fix ioctl and expose the fixed status to userspace.

2018-05-30 07:49:02 +02:00

vmwgfx

drm/vmwgfx: Fix a buffer object leak

2018-05-16 10:06:48 +02:00

ati_pcigart.c

…

drm_agpsupport.c

…

drm_atomic_helper.c

drm/atomic: fix an error code in mode_fixup()

2017-03-15 09:57:15 +08:00

drm_atomic.c

drm/atomic: Handling the case when setting old crtc for plane

2018-08-06 16:24:37 +02:00

drm_auth.c

…

drm_bridge.c

…

drm_bufs.c

…

drm_cache.c

…

drm_context.c

…

drm_crtc_helper.c

…

drm_crtc_internal.h

…

drm_crtc.c

…

drm_debugfs.c

…

drm_dma.c

…

drm_dp_helper.c

…

drm_dp_mst_topology.c

drm/dp/mst: save vcpi with payloads

2017-10-21 17:09:01 +02:00

drm_drv.c

drm: drm_minor_register(): Clean up debugfs on failure

2017-11-15 17:13:09 +01:00

drm_edid_load.c

…

drm_edid.c

drm/edid: set ELD connector type in drm_edid_to_eld()

2018-03-22 09:23:27 +01:00

drm_encoder_slave.c

…

drm_fb_cma_helper.c

…

drm_fb_helper.c

…

drm_flip_work.c

…

drm_fops.c

drm: set FMODE_UNSIGNED_OFFSET for drm files

2018-06-13 16:15:27 +02:00

drm_gem_cma_helper.c

…

drm_gem.c

drm: Release driver tracking before making the object available again

2017-08-30 10:19:23 +02:00

drm_global.c

…

drm_hashtab.c

…

drm_info.c

…

drm_internal.h

…

drm_ioc32.c

…

drm_ioctl.c

…

drm_irq.c

drm: Defer disabling the vblank IRQ until the next interrupt (for instant-off)

2018-03-22 09:23:20 +01:00

drm_legacy.h

…

drm_lock.c

…

drm_memory.c

…

drm_mipi_dsi.c

…

drm_mm.c

drm: Apply range restriction after color adjustment when allocation

2017-11-30 08:37:27 +00:00

drm_modes.c

…

drm_modeset_lock.c

drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all

2018-02-25 11:03:35 +01:00

drm_of.c

…

drm_panel.c

…

drm_pci.c

…

drm_plane_helper.c

…

drm_platform.c

…

drm_prime.c

…

drm_probe_helper.c

drm: Allow determining if current task is output poll worker

2018-03-18 11:17:48 +01:00

drm_rect.c

…

drm_scatter.c

…

drm_sysfs.c

…

drm_trace_points.c

…

drm_trace.h

…

drm_vm.c

…

drm_vma_manager.c

…

Kconfig

…

Makefile

…