Greg Kroah-Hartman 4ac9ab4f5f drm: udl: Properly check framebuffer mmap offsets ...

commit 3b82a4db8e upstream.

The memmap options sent to the udl framebuffer driver were not being
checked for all sets of possible crazy values.  Fix this up by properly
bounding the allowed values.

Reported-by: Eyal Itkin <eyalit@checkpoint.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-03-28 18:39:22 +02:00

..

amd

drm/amdgpu: fix gpu reset crash

2018-03-24 11:00:18 +01:00

arc

…

arm

drm: mali-dp: fix Lx_CONTROL register fields clobber

2017-11-15 15:53:13 +01:00

armada

drm/armada: fix leak of crtc structure

2018-02-25 11:05:49 +01:00

ast

drm/ast: Handle configuration without P2A bridge

2017-07-05 14:40:17 +02:00

atmel-hlcdc

…

bochs

…

bridge

drm/bridge: tc358767: fix 1-lane behavior

2018-02-03 17:05:40 +01:00

cirrus

…

etnaviv

etnaviv: fix gem object list corruption

2017-10-05 09:44:03 +02:00

exynos

drm: exynos: mark pm functions as __maybe_unused

2018-02-25 11:05:54 +01:00

fsl-dcu

drm/fsl-dcu: enable IRQ before drm_atomic_helper_resume()

2017-12-09 22:01:46 +01:00

gma500

drm/gma500/psb: Actually use VBT mode when it is found

2017-06-07 12:07:49 +02:00

hisilicon

drm/hisilicon: Ensure LDI regs are properly configured.

2017-12-05 11:24:35 +01:00

i2c

…

i810

…

i915

drm/i915: Always call to intel_display_set_init_power() in resume_early.

2018-03-18 11:18:48 +01:00

imx

…

mediatek

drm/mediatek: don't use drm_put_dev

2017-11-30 08:39:13 +00:00

mga

…

mgag200

gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap

2017-11-21 09:23:26 +01:00

msm

drm/msm: fix leak in failed get_pages

2018-03-24 11:00:23 +01:00

nouveau

drm/nouveau/kms: Increase max retries in scanout position queries.

2018-03-24 11:00:18 +01:00

omapdrm

drm/omap: DMM: Check for DMM readiness after successful transaction commit

2018-03-24 11:00:25 +01:00

panel

drm/panel: simple: Add missing panel_simple_unprepare() calls

2017-12-05 11:24:34 +01:00

qxl

drm: qxl: Don't alloc fbdev if emulation is not supported

2018-03-22 09:17:36 +01:00

r128

…

radeon

drm/radeon: Don't turn off DP sink when disconnected

2018-03-28 18:39:22 +02:00

rcar-du

drm: rcar-du: Handle event when disabling CRTCs

2018-03-22 09:17:47 +01:00

rockchip

drm/rockchip: vop: Enable pm domain before vop_initial

2018-03-22 09:17:49 +01:00

savage

…

shmobile

…

sis

…

sti

drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache

2017-11-21 09:23:23 +01:00

sun4i

drm/sun4i: Fix TCON clock and regmap initialization sequence

2018-03-22 09:17:37 +01:00

tdfx

…

tegra

…

tilcdc

drm/tilcdc: ensure nonatomic iowrite64 is not used

2018-03-24 11:00:24 +01:00

ttm

drm/ttm: never add BO that failed to validate to the LRU list

2018-03-22 09:17:45 +01:00

udl

drm: udl: Properly check framebuffer mmap offsets

2018-03-28 18:39:22 +02:00

vc4

drm/vc4: Move IRQ enable to PM path

2018-02-03 17:05:41 +01:00

vgem

…

via

…

virtio

drm/virtio: fix framebuffer sparse warning

2017-08-11 08:49:35 -07:00

vmwgfx

drm/vmwgfx: Fix a destoy-while-held mutex problem.

2018-03-28 18:39:22 +02:00

ati_pcigart.c

…

drm_agpsupport.c

…

drm_atomic_helper.c

…

drm_atomic.c

drm/atomic: If the atomic check fails, return its value first

2017-08-30 10:21:48 +02:00

drm_auth.c

…

drm_blend.c

…

drm_bridge.c

…

drm_bufs.c

…

drm_cache.c

…

drm_color_mgmt.c

…

drm_connector.c

drm: Don't race connector registration

2017-06-17 06:41:53 +02:00

drm_context.c

…

drm_crtc_helper_internal.h

…

drm_crtc_helper.c

…

drm_crtc_internal.h

…

drm_crtc.c

…

drm_debugfs.c

…

drm_dma.c

…

drm_dp_aux_dev.c

…

drm_dp_dual_mode_helper.c

…

drm_dp_helper.c

…

drm_dp_mst_topology.c

drm/mst: Avoid processing partially received up/down message transactions

2017-07-27 15:08:07 -07:00

drm_drv.c

drm: drm_minor_register(): Clean up debugfs on failure

2017-11-15 15:53:12 +01:00

drm_edid_load.c

…

drm_edid.c

drm/edid: set ELD connector type in drm_edid_to_eld()

2018-03-22 09:17:53 +01:00

drm_encoder_slave.c

…

drm_encoder.c

…

drm_fb_cma_helper.c

…

drm_fb_helper.c

…

drm_flip_work.c

…

drm_fops.c

…

drm_fourcc.c

…

drm_framebuffer.c

…

drm_gem_cma_helper.c

…

drm_gem.c

drm: Release driver tracking before making the object available again

2017-08-30 10:21:47 +02:00

drm_global.c

…

drm_hashtab.c

…

drm_info.c

…

drm_internal.h

…

drm_ioc32.c

…

drm_ioctl.c

…

drm_irq.c

drm: Defer disabling the vblank IRQ until the next interrupt (for instant-off)

2018-03-22 09:17:39 +01:00

drm_kms_helper_common.c

…

drm_legacy.h

…

drm_lock.c

…

drm_memory.c

…

drm_mipi_dsi.c

…

drm_mm.c

drm: Apply range restriction after color adjustment when allocation

2017-11-30 08:39:13 +00:00

drm_mode_object.c

…

drm_modes.c

…

drm_modeset_helper.c

…

drm_modeset_lock.c

drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all

2018-02-25 11:05:41 +01:00

drm_of.c

…

drm_panel.c

…

drm_pci.c

…

drm_plane_helper.c

…

drm_plane.c

…

drm_platform.c

…

drm_prime.c

…

drm_probe_helper.c

drm: Allow determining if current task is output poll worker

2018-03-18 11:18:48 +01:00

drm_property.c

…

drm_rect.c

…

drm_scatter.c

…

drm_simple_kms_helper.c

…

drm_sysfs.c

…

drm_trace_points.c

…

drm_trace.h

…

drm_vm.c

…

drm_vma_manager.c

…

Kconfig

…

Makefile

…