iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4126d5d61f
linux/drivers/gpu/drm/vmwgfx
History
Dan Carpenter 68c4fce737 vmwgfx: corruption in vmw_event_fence_action_create() 
We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@gmail.com>
2012-09-26 18:40:06 +10:00
..
Kconfig drm/vmwgfx: allow a kconfig option to choose if fbcon is enabled 2012-09-07 13:24:34 +10:00
Makefile vmwgfx: Add screen object support 2011-10-05 10:17:14 +01:00
svga3d_reg.h vmwgfx: Update register files to latest from vmware-sdk 2011-10-05 10:17:08 +01:00
svga_escape.h vmwgfx: Update register files to latest from vmware-sdk 2011-10-05 10:17:08 +01:00
svga_overlay.h vmwgfx: Update register files to latest from vmware-sdk 2011-10-05 10:17:08 +01:00
svga_reg.h vmwgfx: Update register files to latest from vmware-sdk 2011-10-05 10:17:08 +01:00
svga_types.h
vmwgfx_buffer.c drm/ttm: isolate dma data from ttm_tt V4 2011-12-06 10:40:02 +00:00
vmwgfx_dmabuf.c vmwgfx: Fix up query processing 2011-10-05 10:17:22 +01:00
vmwgfx_drv.c vmwgfx: add dumb ioctl support 2012-09-13 11:42:31 +10:00
vmwgfx_drv.h vmwgfx: add dumb ioctl support 2012-09-13 11:42:31 +10:00
vmwgfx_execbuf.c vmwgfx: Make it possible to get fence from execbuf 2012-02-13 12:01:33 +00:00
vmwgfx_fb.c vmwgfx: Pick up the initial size from the width and height regs 2012-02-13 12:01:35 +00:00
vmwgfx_fence.c vmwgfx: corruption in vmw_event_fence_action_create() 2012-09-26 18:40:06 +10:00
vmwgfx_fence.h vmwgfx: Move function declaration to correct header 2012-02-13 12:01:36 +00:00
vmwgfx_fifo.c vmwgfx: Use the revised fifo hw version register when present 2011-12-19 14:06:00 +00:00
vmwgfx_gmr.c drm/vmwgfx: Fix nasty write past alloced memory area 2012-06-01 17:00:20 +01:00
vmwgfx_gmrid_manager.c vmwgfx: Restrict number of GMR pages to device limit 2011-09-01 09:38:07 +01:00
vmwgfx_ioctl.c vmwgfx: Remove dmabuf check in present ioctl 2011-12-19 14:06:01 +00:00
vmwgfx_irq.c vmwgfx: Add fence events 2011-10-10 15:46:55 +01:00
vmwgfx_kms.c drm: stop vmgfx driver explosion 2012-08-22 09:26:50 +10:00
vmwgfx_kms.h vmwgfx: Add page flip support 2012-02-13 12:01:35 +00:00
vmwgfx_ldu.c vmwgfx: Pick up the initial size from the width and height regs 2012-02-13 12:01:35 +00:00
vmwgfx_marker.c vmwgfx: Fix confusion caused by using "fence" in various places 2011-09-06 11:48:40 +01:00
vmwgfx_overlay.c vmwgfx: minor dmabuf utilities cleanup 2011-10-05 10:17:20 +01:00
vmwgfx_reg.h
vmwgfx_resource.c vmwgfx: add dumb ioctl support 2012-09-13 11:42:31 +10:00
vmwgfx_scrn.c vmwgfx: Pick up the initial size from the width and height regs 2012-02-13 12:01:35 +00:00
vmwgfx_ttm_glue.c vmwgfx: Remove the possibility to map the fifo from user-space 2011-09-06 11:48:34 +01:00