TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v4.19.154
twx-linux/drivers/gpu/drm
T
History
Doug Horn 18136b33e3 Fix use after free in get_capset_info callback. 
[ Upstream commit e219688fc5 ]

If a response to virtio_gpu_cmd_get_capset_info takes longer than
five seconds to return, the callback will access freed kernel memory
in vg->capsets.

Signed-off-by: Doug Horn <doughorn@google.com>
Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-30 10:38:31 +01:00
..
amd
drm/amdgpu: prevent double kfree ttm->sg
2020-10-14 10:31:24 +02:00
arc
…
arm
drm/arm: fix unintentional integer overflow on left shift
2020-08-19 08:14:54 +02:00
armada
…
ast
drm/ast: Fixed reboot test may cause system hanged
2019-09-06 10:21:59 +02:00
atmel-hlcdc
drm: atmel-hlcdc: enable clock before configuring timing engine
2020-02-11 04:34:16 -08:00
bochs
drm/bochs: downgrade pci_request_region failure from error to warning
2020-04-13 10:44:59 +02:00
bridge
drm/bridge: sil_sii8620: initialize return of sii8620_readb
2020-08-19 08:14:57 +02:00
cirrus
…
etnaviv
drm/etnaviv: Fix error path on failure to enable bus clk
2020-08-19 08:14:54 +02:00
exynos
drm/exynos: fix ref count leak in mic_pre_enable
2020-07-22 09:32:01 +02:00
fsl-dcu
…
gma500
drm/gma500: fix error check
2020-10-29 09:55:07 +01:00
hisilicon
drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
2020-01-27 14:49:55 +01:00
i2c
…
i810
drm/i810: Prevent underflow in ioctl
2019-12-13 08:52:44 +01:00
i915
drm/i915/icl+: Fix hotplug interrupt disabling after storm detection
2020-06-25 15:33:09 +02:00
imx
drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
2020-08-21 11:05:34 +02:00
lib
…
mediatek
drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata()
2020-09-23 12:11:00 +02:00
meson
drm: meson: venc: cvbs: fix CVBS mode matching
2019-12-21 10:57:39 +01:00
mga
…
mgag200
…
msm
drm/msm/a5xx: Always set an OPP supported hardware value
2020-10-01 13:14:38 +02:00
mxsfb
…
nouveau
drm/nouveau/mem: guard against NULL pointer access in mem_del
2020-10-14 10:31:21 +02:00
omapdrm
drm/omap: fix possible object reference leak
2020-10-01 13:14:33 +02:00
panel
drm: panel: simple: Fix bpc for LG LB070WV8 panel
2020-08-19 08:14:57 +02:00
pl111
…
qxl
drm/qxl: Use correct notify port address when creating cursor ring
2020-06-25 15:33:06 +02:00
r128
…
radeon
PCI: Use ioremap(), not phys_to_virt() for platform ROM
2020-10-01 13:14:40 +02:00
rcar-du
drm: rcar-du: Fix build error
2020-06-30 23:17:17 -04:00
rockchip
drm/rockchip: Suspend DP late
2019-08-29 08:28:40 +02:00
savage
…
scheduler
…
selftests
…
shmobile
drm/shmob: Fix return value check in shmob_drm_probe
2020-01-27 14:50:12 +01:00
sis
…
sti
drm/sti: do not remove the drm_bridge that was never added
2020-01-27 14:49:53 +01:00
stm
drm/stm: attach gem fence to atomic state
2019-10-07 18:56:31 +02:00
sun4i
drm/sun4i: mixer: Extend regmap max_register
2020-10-07 08:00:06 +02:00
tdfx
…
tegra
drm/tegra: hub: Do not enable orphaned window group
2020-07-16 08:17:21 +02:00
tilcdc
drm/tilcdc: fix leak & null ref in panel_connector_get_modes
2020-08-19 08:14:50 +02:00
tinydrm
…
ttm
drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
2020-08-19 08:15:06 +02:00
tve200
drm/tve200: Stabilize enable/disable
2020-09-17 13:45:29 +02:00
udl
…
v3d
…
vc4
drm/vc4/vc4_hdmi: fill ASoC card owner
2020-10-01 13:14:52 +02:00
vgem
drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
2020-08-26 10:30:58 +02:00
via
…
virtio
Fix use after free in get_capset_info callback.
2020-10-30 10:38:31 +01:00
vkms
drm/vkms: Hold gem object while still in-use
2020-06-22 09:05:08 +02:00
vmwgfx
drm/vmwgfx: Fix two list_for_each loop exit tests
2020-08-21 11:05:37 +02:00
xen
drm/xen-front: Fix mmap attributes for display buffers
2020-01-27 14:50:19 +01:00
zte
…
ati_pcigart.c
…
drm_agpsupport.c
…
drm_atomic_helper.c
drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors
2019-09-16 08:22:23 +02:00
drm_atomic.c
drm/atomic_helper: Allow DPMS On<->Off changes for unregistered connectors
2019-09-16 08:22:23 +02:00
drm_auth.c
…
drm_blend.c
…
drm_bridge.c
…
drm_bufs.c
…
drm_cache.c
…
drm_client.c
…
drm_color_mgmt.c
…
drm_connector.c
…
drm_context.c
drm: Fix error handling in drm_legacy_addctx
2020-01-27 14:50:10 +01:00
drm_crtc_helper_internal.h
…
drm_crtc_helper.c
…
drm_crtc_internal.h
…
drm_crtc.c
…
drm_debugfs_crc.c
drm: remove the newline for CRC source name.
2020-02-24 08:34:45 +01:00
drm_debugfs.c
drm/debugfs: fix plain echo to connector "force" attribute
2020-08-19 08:14:52 +02:00
drm_dma.c
…
drm_dp_aux_dev.c
…
drm_dp_cec.c
…
drm_dp_dual_mode_helper.c
…
drm_dp_helper.c
…
drm_dp_mst_topology.c
drm/dp_mst: Increase ACT retry timeout to 3s
2020-06-25 15:33:07 +02:00
drm_drv.c
…
drm_dumb_buffers.c
…
drm_edid_load.c
drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
2019-07-31 07:26:58 +02:00
drm_edid.c
drm/edid: Add Oculus Rift S to non-desktop list
2020-06-07 13:17:56 +02:00
drm_encoder_slave.c
drm: encoder_slave: fix refcouting error for modules
2020-06-25 15:33:06 +02:00
drm_encoder.c
…
drm_fb_cma_helper.c
…
drm_fb_helper.c
drm/fb-helper: generic: Call drm_client_add() after setup is done
2020-01-27 14:50:36 +01:00
drm_file.c
…
drm_flip_work.c
…
drm_fourcc.c
…
drm_framebuffer.c
drm: silence variable 'conn' set but not used
2019-08-16 10:12:46 +02:00
drm_gem_cma_helper.c
…
drm_gem_framebuffer_helper.c
…
drm_gem.c
drm: hold gem reference until object is no longer accessed
2020-08-05 10:06:01 +02:00
drm_global.c
…
drm_hashtab.c
…
drm_info.c
…
drm_internal.h
…
drm_ioc32.c
drm: add __user attribute to ptr_to_compat()
2019-09-16 08:22:08 +02:00
drm_ioctl.c
drm/atomic: Take the atomic toys away from X
2020-05-10 10:30:12 +02:00
drm_irq.c
…
drm_kms_helper_common.c
…
drm_lease.c
drm/lease: fix WARNING in idr_destroy
2020-03-25 08:06:12 +01:00
drm_legacy.h
…
drm_lock.c
…
drm_memory.c
…
drm_mipi_dsi.c
drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
2020-08-19 08:14:55 +02:00
drm_mm.c
…
drm_mode_config.c
…
drm_mode_object.c
…
drm_modes.c
…
drm_modeset_helper.c
…
drm_modeset_lock.c
…
drm_of.c
…
drm_panel_orientation_quirks.c
drm: Added orientation quirk for ASUS tablet model T103HAF
2020-08-21 11:05:39 +02:00
drm_panel.c
…
drm_pci.c
drm: Remove PageReserved manipulation from drm_pci_alloc
2020-04-17 10:48:55 +02:00
drm_plane_helper.c
…
drm_plane.c
…
drm_prime.c
…
drm_print.c
…
drm_probe_helper.c
drm: Flush output polling on shutdown
2019-10-01 08:26:11 +02:00
drm_property.c
drm: limit to INT_MAX in create_blob ioctl
2020-01-09 10:18:59 +01:00
drm_rect.c
drm/rect: Avoid division by zero
2020-02-11 04:34:07 -08:00
drm_scatter.c
…
drm_scdc_helper.c
…
drm_simple_kms_helper.c
…
drm_syncobj.c
…
drm_sysfs.c
…
drm_trace_points.c
…
drm_trace.h
…
drm_vblank.c
drm/drm_vblank: Change EINVAL by the correct errno
2019-12-31 16:35:01 +01:00
drm_vm.c
…
drm_vma_manager.c
…
drm_writeback.c
…
Kconfig
…
Makefile
…