TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.14.67
twx-linux/drivers/gpu/drm
T
History
Dan Carpenter dcedabcab0 drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply() 
[ Upstream commit 7f073d011f ]

The bo array has req->nr_buffers elements so the > should be >= so we
don't read beyond the end of the array.

Fixes: a1606a9596 ("drm/nouveau: new gem pushbuf interface, bump to 0.0.16")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-08-24 13:09:18 +02:00
..
amd
drm/amdgpu: fix swapped emit_ib_size in vce3
2018-08-24 13:09:11 +02:00
arc
…
arm
drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format
2018-08-24 13:09:00 +02:00
armada
drm/armada: fix irq handling
2018-08-24 13:09:14 +02:00
ast
drm/ast: Fixed 1280x800 Display Issue
2018-05-30 07:52:19 +02:00
atmel-hlcdc
drm/atmel-hlcdc: check stride values in the first plane
2018-07-08 15:30:48 +02:00
bochs
…
bridge
drm/bridge/sii8620: Fix display of packed pixel modes
2018-08-24 13:09:12 +02:00
cirrus
drm/cirrus: Load lut in crtc_commit
2018-02-28 10:19:43 +01:00
etnaviv
drm/etnaviv: make THERMAL selectable
2018-03-19 08:42:51 +01:00
exynos
drm/exynos: decon5433: Fix WINCONx reset value
2018-08-24 13:09:09 +02:00
fsl-dcu
…
gma500
drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
2018-08-03 07:50:39 +02:00
hisilicon
…
i2c
…
i810
…
i915
drm/i915/kvmgt: Fix potential Spectre v1
2018-08-24 13:08:55 +02:00
imx
drm/imx: move arming of the vblank event to atomic_flush
2018-05-30 07:52:15 +02:00
lib
…
mediatek
…
meson
drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()'
2018-05-30 07:52:33 +02:00
mga
…
mgag200
…
msm
drm/msm: don't deref error pointer in the msm_fbdev_create error path
2018-06-21 04:02:44 +09:00
mxsfb
…
nouveau
drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
2018-08-24 13:09:18 +02:00
omapdrm
drm/omap: handle alloc failures in omap_connector
2018-06-21 04:02:55 +09:00
panel
drm/panel: simple: Fix the bus format for the Ontat panel
2018-05-30 07:52:34 +02:00
pl111
…
qxl
drm/qxl: Call qxl_bo_unref outside atomic context
2018-07-08 15:30:48 +02:00
r128
…
radeon
drm/radeon: fix mode_valid's return type
2018-08-03 07:50:34 +02:00
rcar-du
drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2
2018-05-30 07:52:40 +02:00
rockchip
drm/rockchip: Respect page offset for PRIME mmap calls
2018-05-30 07:52:39 +02:00
savage
…
selftests
…
shmobile
…
sis
…
sti
…
stm
…
sun4i
drm/sun4i: Fix dclk_set_phase
2018-05-30 07:52:08 +02:00
tdfx
…
tegra
drm/tegra: Fix comparison operator for buffer size
2018-08-24 13:09:14 +02:00
tilcdc
drm/tilcdc: ensure nonatomic iowrite64 is not used
2018-03-24 11:01:24 +01:00
tinydrm
…
ttm
drm/ttm: check the return value of kzalloc
2018-03-03 10:24:33 +01:00
udl
drm/udl: fix display corruption of the last line
2018-07-11 16:29:16 +02:00
vc4
drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats
2018-08-06 16:20:51 +02:00
vgem
…
via
…
virtio
virtio-gpu: fix ioctl and expose the fixed status to userspace.
2018-05-30 07:52:05 +02:00
vmwgfx
drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful
2018-05-30 07:52:42 +02:00
zte
…
ati_pcigart.c
…
drm_agpsupport.c
…
drm_atomic_helper.c
drm/atomic-helper: Drop plane->fb references only for drm_atomic_helper_shutdown()
2018-08-03 07:50:42 +02:00
drm_atomic.c
drm/atomic: Handling the case when setting old crtc for plane
2018-08-03 07:50:37 +02:00
drm_auth.c
…
drm_blend.c
…
drm_bridge.c
…
drm_bufs.c
…
drm_cache.c
…
drm_color_mgmt.c
…
drm_connector.c
…
drm_context.c
…
drm_crtc_helper_internal.h
…
drm_crtc_helper.c
…
drm_crtc_internal.h
…
drm_crtc.c
…
drm_debugfs_crc.c
…
drm_debugfs.c
…
drm_dma.c
…
drm_dp_aux_dev.c
…
drm_dp_dual_mode_helper.c
drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state
2018-04-26 11:02:02 +02:00
drm_dp_helper.c
drm/psr: Fix missed entry in PSR setup time table.
2018-06-05 11:41:59 +02:00
drm_dp_mst_topology.c
drm/dp/mst: Fix off-by-one typo when dump payload table
2018-08-03 07:50:42 +02:00
drm_drv.c
drm: Match sysfs name in link removal to link creation
2018-05-22 18:53:58 +02:00
drm_dumb_buffers.c
drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl()
2018-06-21 04:03:00 +09:00
drm_edid_load.c
…
drm_edid.c
drm/edid: set ELD connector type in drm_edid_to_eld()
2018-03-19 08:42:47 +01:00
drm_encoder_slave.c
…
drm_encoder.c
…
drm_fb_cma_helper.c
…
drm_fb_helper.c
…
drm_file.c
drm: set FMODE_UNSIGNED_OFFSET for drm files
2018-06-11 22:49:22 +02:00
drm_flip_work.c
…
drm_fourcc.c
…
drm_framebuffer.c
drm: Reject getfb for multi-plane framebuffers
2018-03-28 18:24:40 +02:00
drm_gem_cma_helper.c
…
drm_gem_framebuffer_helper.c
…
drm_gem.c
…
drm_global.c
…
drm_hashtab.c
…
drm_info.c
…
drm_internal.h
…
drm_ioc32.c
…
drm_ioctl.c
…
drm_irq.c
…
drm_kms_helper_common.c
…
drm_legacy.h
…
drm_lock.c
…
drm_memory.c
…
drm_mipi_dsi.c
…
drm_mm.c
drm: Handle unexpected holes in color-eviction
2018-02-28 10:19:43 +01:00
drm_mode_config.c
…
drm_mode_object.c
…
drm_modes.c
…
drm_modeset_helper.c
…
drm_modeset_lock.c
drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all
2018-02-25 11:07:47 +01:00
drm_of.c
…
drm_panel.c
…
drm_pci.c
…
drm_plane_helper.c
…
drm_plane.c
…
drm_prime.c
…
drm_print.c
…
drm_probe_helper.c
drm: Allow determining if current task is output poll worker
2018-03-15 10:54:29 +01:00
drm_property.c
drm: Use kvzalloc for allocating blob property memory
2018-07-11 16:29:16 +02:00
drm_rect.c
…
drm_scatter.c
…
drm_scdc_helper.c
…
drm_simple_kms_helper.c
…
drm_syncobj.c
drm/syncobj: Stop reusing the same struct file for all syncobj -> fd
2018-03-28 18:24:47 +02:00
drm_sysfs.c
…
drm_trace_points.c
…
drm_trace.h
…
drm_vblank.c
…
drm_vm.c
…
drm_vma_manager.c
…
Kconfig
…
Makefile
…