Dan Carpenter 700cbb69ed drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply() ...

[ Upstream commit 7f073d011f ]

The bo array has req->nr_buffers elements so the > should be >= so we
don't read beyond the end of the array.

Fixes: a1606a9596 ("drm/nouveau: new gem pushbuf interface, bump to 0.0.16")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-08-24 13:12:39 +02:00

..

amd

drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders

2018-05-01 15:13:09 -07:00

arc

…

arm

drm: mali-dp: Enable Global SE interrupts mask for DP500

2018-08-24 13:12:28 +02:00

armada

drm/armada: fix colorkey mode property

2018-08-24 13:12:37 +02:00

ast

…

atmel-hlcdc

…

bochs

…

bridge

drm/bridge: vga-dac: Fix edid memory leak

2018-05-09 09:50:22 +02:00

cirrus

…

etnaviv

…

exynos

drm/exynos: decon5433: Fix WINCONx reset value

2018-08-24 13:12:34 +02:00

fsl-dcu

drm/fsl-dcu: enable IRQ before drm_atomic_helper_resume()

2017-12-09 22:01:46 +01:00

gma500

drm/gma500: fix psb_intel_lvds_mode_valid()'s return type

2018-08-03 07:55:24 +02:00

hisilicon

drm/hisilicon: Ensure LDI regs are properly configured.

2017-12-05 11:24:35 +01:00

i2c

…

i810

…

i915

drm/i915: Fix hotplug irq ack on i965/g4x

2018-07-25 11:24:00 +02:00

imx

drm/imx: move arming of the vblank event to atomic_flush

2018-05-30 07:50:37 +02:00

mediatek

drm/mediatek: don't use drm_put_dev

2017-11-30 08:39:13 +00:00

mga

…

mgag200

gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap

2017-11-21 09:23:26 +01:00

msm

drm/msm: Take the mutex before calling msm_gem_new_impl

2018-04-13 19:48:07 +02:00

nouveau

drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()

2018-08-24 13:12:39 +02:00

omapdrm

drm/omap: fix tiled buffer stride calculations

2018-04-13 19:48:18 +02:00

panel

drm/panel: simple: Fix the bus format for the Ontat panel

2018-05-30 07:50:46 +02:00

qxl

drm: qxl: Don't alloc fbdev if emulation is not supported

2018-03-22 09:17:36 +01:00

r128

…

radeon

drm/radeon: fix mode_valid's return type

2018-08-03 07:55:21 +02:00

rcar-du

drm: rcar-du: Handle event when disabling CRTCs

2018-03-22 09:17:47 +01:00

rockchip

drm/rockchip: Respect page offset for PRIME mmap calls

2018-05-30 07:50:50 +02:00

savage

…

shmobile

…

sis

…

sti

drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache

2017-11-21 09:23:23 +01:00

sun4i

drm/sun4i: Fix dclk_set_phase

2018-05-30 07:50:33 +02:00

tdfx

…

tegra

…

tilcdc

drm/tilcdc: ensure nonatomic iowrite64 is not used

2018-03-24 11:00:24 +01:00

ttm

drm/ttm: never add BO that failed to validate to the LRU list

2018-03-22 09:17:45 +01:00

udl

drm/udl: fix display corruption of the last line

2018-07-11 16:26:44 +02:00

vc4

drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats

2018-08-06 16:23:04 +02:00

vgem

…

via

…

virtio

virtio-gpu: fix ioctl and expose the fixed status to userspace.

2018-05-30 07:50:32 +02:00

vmwgfx

drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros

2018-05-30 07:50:17 +02:00

ati_pcigart.c

…

drm_agpsupport.c

…

drm_atomic_helper.c

…

drm_atomic.c

drm/atomic: Handling the case when setting old crtc for plane

2018-08-03 07:55:23 +02:00

drm_auth.c

…

drm_blend.c

…

drm_bridge.c

…

drm_bufs.c

…

drm_cache.c

…

drm_color_mgmt.c

…

drm_connector.c

…

drm_context.c

…

drm_crtc_helper_internal.h

…

drm_crtc_helper.c

…

drm_crtc_internal.h

…

drm_crtc.c

…

drm_debugfs.c

…

drm_dma.c

…

drm_dp_aux_dev.c

…

drm_dp_dual_mode_helper.c

drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state

2018-04-29 11:31:56 +02:00

drm_dp_helper.c

drm/psr: Fix missed entry in PSR setup time table.

2018-06-06 16:44:38 +02:00

drm_dp_mst_topology.c

…

drm_drv.c

…

drm_edid_load.c

…

drm_edid.c

drm/edid: set ELD connector type in drm_edid_to_eld()

2018-03-22 09:17:53 +01:00

drm_encoder_slave.c

…

drm_encoder.c

…

drm_fb_cma_helper.c

…

drm_fb_helper.c

…

drm_flip_work.c

…

drm_fops.c

drm: set FMODE_UNSIGNED_OFFSET for drm files

2018-06-13 16:16:41 +02:00

drm_fourcc.c

…

drm_framebuffer.c

…

drm_gem_cma_helper.c

…

drm_gem.c

…

drm_global.c

…

drm_hashtab.c

…

drm_info.c

…

drm_internal.h

…

drm_ioc32.c

…

drm_ioctl.c

…

drm_irq.c

drm: Defer disabling the vblank IRQ until the next interrupt (for instant-off)

2018-03-22 09:17:39 +01:00

drm_kms_helper_common.c

…

drm_legacy.h

…

drm_lock.c

…

drm_memory.c

…

drm_mipi_dsi.c

…

drm_mm.c

drm: Apply range restriction after color adjustment when allocation

2017-11-30 08:39:13 +00:00

drm_mode_object.c

…

drm_modes.c

…

drm_modeset_helper.c

…

drm_modeset_lock.c

drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all

2018-02-25 11:05:41 +01:00

drm_of.c

…

drm_panel.c

…

drm_pci.c

…

drm_plane_helper.c

…

drm_plane.c

…

drm_platform.c

…

drm_prime.c

…

drm_probe_helper.c

drm: Allow determining if current task is output poll worker

2018-03-18 11:18:48 +01:00

drm_property.c

…

drm_rect.c

…

drm_scatter.c

…

drm_simple_kms_helper.c

…

drm_sysfs.c

…

drm_trace_points.c

…

drm_trace.h

…

drm_vm.c

…

drm_vma_manager.c

…

Kconfig

…

Makefile

…