TWxSoftware/twx-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
v5.4.74
twx-linux/drivers/gpu/drm
T
History
Doug Horn f3c23dcff8 Fix use after free in get_capset_info callback. 
[ Upstream commit e219688fc5 ]

If a response to virtio_gpu_cmd_get_capset_info takes longer than
five seconds to return, the callback will access freed kernel memory
in vg->capsets.

Signed-off-by: Doug Horn <doughorn@google.com>
Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-29 09:58:07 +01:00
..
amd
drm/amd/display: Fix wrong return value in dm_update_plane_state()
2020-10-29 09:57:35 +01:00
arc
…
arm
drm/arm: fix unintentional integer overflow on left shift
2020-08-19 08:16:07 +02:00
armada
…
aspeed
…
ast
…
atmel-hlcdc
drm: atmel-hlcdc: prefer a lower pixel-clock than requested
2020-02-11 04:35:36 -08:00
bochs
drm/drm_fb_helper: fix fbdev with sparc64
2020-08-11 15:33:37 +02:00
bridge
drm/bridge: sil_sii8620: initialize return of sii8620_readb
2020-08-19 08:16:11 +02:00
cirrus
…
etnaviv
drm/etnaviv: fix TS cache flushing on GPUs with BLT engine
2020-09-05 11:22:50 +02:00
exynos
drm/exynos: dsi: Remove bridge node reference in error handling path in probe function
2020-10-01 13:18:01 +02:00
fsl-dcu
…
gma500
drm/gma500: fix error check
2020-10-29 09:57:36 +01:00
hisilicon
drm: kirin: Revert "Fix for hikey620 display offset problem"
2020-03-12 13:00:26 +01:00
i2c
…
i810
drm/i810: Prevent underflow in ioctl
2019-12-13 08:42:56 +01:00
i915
drm/i915: Filter wake_flags passed to default_wake_function
2020-09-23 12:40:43 +02:00
imx
drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
2020-08-21 13:05:29 +02:00
ingenic
drm/ingenic: Fix incorrect assumption about plane->index
2020-09-03 11:26:52 +02:00
lib
…
lima
…
mcde
drm/mcde: Handle pending vblank while disabling display
2020-10-01 13:17:25 +02:00
mediatek
drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata()
2020-09-23 12:40:42 +02:00
meson
drm/meson: vclk: use the correct G12A frac max value
2019-12-31 16:43:09 +01:00
mga
…
mgag200
drm/mgag200: Flag all G200 SE A machines as broken wrt <startadd>
2019-12-21 11:04:54 +01:00
msm
drm/msm/a6xx: fix a potential overflow issue
2020-10-29 09:58:06 +01:00
mxsfb
drm: mxsfb: check framebuffer pitch
2020-10-29 09:57:40 +01:00
nouveau
drm/nouveau/mem: guard against NULL pointer access in mem_del
2020-10-14 10:32:57 +02:00
omapdrm
drm/omap: dss: Cleanup DSS ports on initialisation failure
2020-10-01 13:17:37 +02:00
panel
drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel
2020-10-29 09:57:37 +01:00
panfrost
drm/panfrost: add amlogic reset quirk callback
2020-10-29 09:58:05 +01:00
pl111
…
qxl
drm/qxl: Use correct notify port address when creating cursor ring
2020-06-24 17:50:48 +02:00
r128
…
radeon
PCI: Use ioremap(), not phys_to_virt() for platform ROM
2020-10-01 13:17:51 +02:00
rcar-du
drm: rcar-du: Fix build error
2020-06-30 15:37:11 -04:00
rockchip
drm/bridge: analogix_dp: Split bind() into probe() and real bind()
2020-05-10 10:31:22 +02:00
savage
…
scheduler
drm/scheduler: Avoid accessing freed bad job.
2020-10-01 13:17:25 +02:00
selftests
drm/modes: Make sure to parse valid rotation value from cmdline
2020-03-12 13:00:11 +01:00
shmobile
…
sis
…
sti
…
stm
drm/stm: repair runtime power management
2020-08-19 08:16:11 +02:00
sun4i
drm/sun4i: mixer: Extend regmap max_register
2020-10-07 08:01:26 +02:00
tdfx
…
tegra
drm/tegra: hub: Do not enable orphaned window group
2020-07-16 08:16:33 +02:00
tilcdc
drm/tilcdc: fix leak & null ref in panel_connector_get_modes
2020-08-19 08:15:59 +02:00
tiny
drm/tiny: Kconfig: Remove always-y THERMAL dep. from TINYDRM_REPAPER
2019-10-10 15:15:51 +02:00
ttm
drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access
2020-08-26 10:40:56 +02:00
tve200
drm/tve200: Stabilize enable/disable
2020-09-17 13:47:53 +02:00
udl
…
v3d
drm/v3d: Fix memory leak in v3d_submit_cl_ioctl
2019-10-23 20:57:05 +02:00
vboxvideo
…
vc4
drm/vc4/vc4_hdmi: fill ASoC card owner
2020-10-01 13:18:17 +02:00
vgem
drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
2020-08-26 10:40:47 +02:00
via
…
virtio
Fix use after free in get_capset_info callback.
2020-10-29 09:58:07 +01:00
vkms
drm/vkms: fix xrgb on compute crc
2020-10-29 09:57:34 +01:00
vmwgfx
drm/vmwgfx: Fix two list_for_each loop exit tests
2020-08-21 13:05:36 +02:00
xen
drm/xen-front: Fix misused IS_ERR_OR_NULL checks
2020-09-03 11:26:50 +02:00
zte
…
ati_pcigart.c
…
drm_agpsupport.c
…
drm_atomic_helper.c
drm/atomic: fix self-refresh helpers crtc state dereference
2019-11-06 13:00:21 -05:00
drm_atomic_state_helper.c
…
drm_atomic_uapi.c
…
drm_atomic.c
…
drm_auth.c
…
drm_blend.c
…
drm_bridge.c
…
drm_bufs.c
…
drm_cache.c
…
drm_client_modeset.c
Revert "drm/fbdev: Fallback to non tiled mode if all tiles not present"
2020-03-25 08:25:50 +01:00
drm_client.c
…
drm_color_mgmt.c
…
drm_connector.c
drm/connector: notify userspace on hotplug after register complete
2020-06-24 17:50:50 +02:00
drm_context.c
…
drm_crtc_helper_internal.h
…
drm_crtc_helper.c
…
drm_crtc_internal.h
…
drm_crtc.c
…
drm_damage_helper.c
drm: damage_helper: Fix race checking plane->state->fb
2019-12-13 08:42:55 +01:00
drm_debugfs_crc.c
drm/crc-debugfs: Fix memleak in crc_control_write
2020-10-29 09:57:37 +01:00
drm_debugfs.c
drm/debugfs: fix plain echo to connector "force" attribute
2020-08-19 08:16:02 +02:00
drm_dma.c
…
drm_dp_aux_dev.c
…
drm_dp_cec.c
…
drm_dp_dual_mode_helper.c
…
drm_dp_helper.c
…
drm_dp_mst_topology.c
drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi
2020-08-21 13:05:39 +02:00
drm_drv.c
…
drm_dsc.c
…
drm_dumb_buffers.c
…
drm_edid_load.c
…
drm_edid.c
drm/edid: Add Oculus Rift S to non-desktop list
2020-06-07 13:18:51 +02:00
drm_encoder_slave.c
drm: encoder_slave: fix refcouting error for modules
2020-06-24 17:50:47 +02:00
drm_encoder.c
…
drm_fb_cma_helper.c
…
drm_fb_helper.c
drm/drm_fb_helper: fix fbdev with sparc64
2020-08-11 15:33:37 +02:00
drm_file.c
…
drm_flip_work.c
…
drm_format_helper.c
…
drm_fourcc.c
…
drm_framebuffer.c
…
drm_gem_cma_helper.c
…
drm_gem_framebuffer_helper.c
…
drm_gem_shmem_helper.c
…
drm_gem_vram_helper.c
…
drm_gem.c
drm/gem: Fix a leak in drm_gem_objects_lookup()
2020-08-19 08:16:05 +02:00
drm_hashtab.c
…
drm_hdcp.c
…
drm_internal.h
…
drm_ioc32.c
…
drm_ioctl.c
…
drm_irq.c
…
drm_kms_helper_common.c
…
drm_lease.c
drm/lease: fix WARNING in idr_destroy
2020-03-25 08:25:56 +01:00
drm_legacy_misc.c
…
drm_legacy.h
…
drm_lock.c
…
drm_memory.c
…
drm_mipi_dbi.c
drm/dbi: Fix SPI Type 1 (9-bit) transfer
2020-08-05 09:59:44 +02:00
drm_mipi_dsi.c
drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
2020-08-19 08:16:08 +02:00
drm_mm.c
…
drm_mode_config.c
…
drm_mode_object.c
…
drm_modes.c
drm/modes: Make sure to parse valid rotation value from cmdline
2020-03-12 13:00:11 +01:00
drm_modeset_helper.c
…
drm_modeset_lock.c
…
drm_of.c
…
drm_panel_orientation_quirks.c
drm: Added orientation quirk for ASUS tablet model T103HAF
2020-08-21 13:05:39 +02:00
drm_panel.c
…
drm_pci.c
drm: Remove PageReserved manipulation from drm_pci_alloc
2020-04-17 10:50:20 +02:00
drm_plane_helper.c
…
drm_plane.c
…
drm_prime.c
…
drm_print.c
…
drm_probe_helper.c
…
drm_property.c
drm: limit to INT_MAX in create_blob ioctl
2020-01-04 19:18:43 +01:00
drm_rect.c
drm/rect: Avoid division by zero
2020-02-11 04:35:36 -08:00
drm_scatter.c
…
drm_scdc_helper.c
…
drm_self_refresh_helper.c
drm/atomic: fix self-refresh helpers crtc state dereference
2019-11-06 13:00:21 -05:00
drm_simple_kms_helper.c
…
drm_syncobj.c
…
drm_sysfs.c
drm/connector: notify userspace on hotplug after register complete
2020-06-24 17:50:50 +02:00
drm_trace_points.c
…
drm_trace.h
…
drm_vblank.c
drm/drm_vblank: Change EINVAL by the correct errno
2019-12-31 16:43:50 +01:00
drm_vm.c
…
drm_vma_manager.c
…
drm_vram_helper_common.c
…
drm_vram_mm_helper.c
…
drm_writeback.c
…
Kconfig
…
Makefile
…