iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/gpu/drm/vmwgfx
History
Murray McAllister 5ed7f4b5ec drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read 
If SVGA_3D_CMD_DX_SET_SHADER is called with a shader ID
of SVGA3D_INVALID_ID, and a shader type of
SVGA3D_SHADERTYPE_INVALID, the calculated binding.shader_slot
will be 4294967295, leading to an out-of-bounds read in vmw_binding_loc()
when the offset is calculated.

Cc: <stable@vger.kernel.org>
Fixes: d80efd5cb3de ("drm/vmwgfx: Initial DX support")
Signed-off-by: Murray McAllister <murray.mcallister@gmail.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
2019-05-21 10:23:10 +02:00
..
device_include
Merge tag 'vmwgfx-next-4.19-3' of git://people.freedesktop.org/~thomash/linux into drm-next
2018-07-10 11:13:39 +10:00
Kconfig
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
Makefile
drm/vmwgfx: Add a validation module v2
2018-09-27 15:21:35 +02:00
ttm_lock.c
drm/vmwgfx: Make the object handles idr-generated
2018-09-27 16:14:18 +02:00
ttm_lock.h
drm/ttm, drm/vmwgfx: Move the lock- and object functionality to the vmwgfx driver
2018-09-27 15:19:20 +02:00
ttm_object.c
drm/vmwgfx: Fix user space handle equal to zero
2019-05-21 10:23:09 +02:00
ttm_object.h
drm/vmwgfx: Look up objects without taking a reference
2018-09-27 16:14:48 +02:00
vmwgfx_binding.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_binding.h
drm/vmwgfx: Be more restrictive when dirtying resources
2019-04-08 10:29:04 -07:00
vmwgfx_blit.c
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_bo.c
drm/vmwgfx: Replace ttm_bo_unref with ttm_bo_put
2019-01-28 11:43:24 -05:00
vmwgfx_cmdbuf_res.c
drm/vmwgfx: Don't refcount command-buffer managed resource lookups during command buffer validation
2018-09-28 08:57:08 +02:00
vmwgfx_cmdbuf.c
drm/vmwgfx: Use VMW_DEBUG_USER for device command buffer errors
2019-04-08 10:29:05 -07:00
vmwgfx_context.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_cotable.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_drv.c
drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
2019-05-21 10:22:40 +02:00
vmwgfx_drv.h
drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses
2019-05-21 10:23:09 +02:00
vmwgfx_execbuf.c
drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
2019-05-21 10:23:10 +02:00
vmwgfx_fb.c
drm/vmwgfx: Remove set but not used variable 'fb_offset, fb_depth'
2019-04-08 10:29:05 -07:00
vmwgfx_fence.c
drm/vmwgfx: Remove set but not used variable 'file_priv'
2018-12-05 10:09:27 +01:00
vmwgfx_fence.h
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_fifo.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_gmr.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_gmrid_manager.c
drm/vmwgfx: Return 0 when gmrid::get_node runs out of ID's
2019-03-20 07:53:29 +01:00
vmwgfx_ioctl.c
drm/vmwgfx: Add a new define for vmwgfx user-space debugging
2019-04-08 10:29:04 -07:00
vmwgfx_irq.c
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_kms.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_kms.h
drm: Split out drm_probe_helper.h
2019-01-24 13:20:42 +01:00
vmwgfx_ldu.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_marker.c
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_mob.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_msg.c
Merge tag 'vmwgfx-next-4.19-2' of git://people.freedesktop.org/~thomash/linux into drm-next
2018-07-10 11:10:34 +10:00
vmwgfx_msg.h
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_overlay.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_prime.c
drm/ttm, drm/vmwgfx: Move the lock- and object functionality to the vmwgfx driver
2018-09-27 15:19:20 +02:00
vmwgfx_reg.h
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_resource_priv.h
drm/vmwgfx: Make the object handles idr-generated
2018-09-27 16:14:18 +02:00
vmwgfx_resource.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_scrn.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_shader.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_simple_resource.c
drm/vmwgfx: Add a new define for vmwgfx user-space debugging
2019-04-08 10:29:04 -07:00
vmwgfx_so.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_so.h
drm/vmwgfx: Be more restrictive when dirtying resources
2019-04-08 10:29:04 -07:00
vmwgfx_stdu.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_surface.c
drm/vmwgfx: Use preprocessor macro for FIFO allocation
2019-04-08 10:29:05 -07:00
vmwgfx_ttm_buffer.c
drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses
2019-05-21 10:23:09 +02:00
vmwgfx_ttm_glue.c
drm/ttm: Quick-test mmap offset in ttm_bo_mmap()
2019-03-19 15:03:53 -05:00
vmwgfx_va.c
drm/vmwgfx: add SPDX idenitifier and clarify license
2018-06-29 15:28:48 -05:00
vmwgfx_validation.c
drm/vmwgfx: Add a new define for vmwgfx user-space debugging
2019-04-08 10:29:04 -07:00
vmwgfx_validation.h
drm/vmwgfx: Be more restrictive when dirtying resources
2019-04-08 10:29:04 -07:00