Colin Ian King 8e60b7f195 drm/i915/gvt: fix off-by-one comparison of ring_id ...

The ring_id maximum boundary is being compared using the > operator
instead of >=, leading to an off-by-one error and an out of bounds
write into array vgpu->hws_pga[].  Fix this by simply using the
correct comparison operator. Also re-work another comparison that
uses the comparison > I915_NUM_ENGINES - 1 to use the >= idiom using
to keep this consistent in this code.

Detected by CoverityScan, CID#1462404 ("Out-of-bounds write")

Fixes: a2ae95af9646 ("drm/i915/gvt: update CSB and CSB write pointer in virtual HWSP")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>

2017-12-05 11:45:06 +08:00

..

aperture_gm.c

drm/i915: Add interface to reserve fence registers for vGPU

2017-09-04 16:34:59 +01:00

cfg_space.c

drm/i915/gvt: Alloc and Init guest opregion at vgpu creation

2017-12-04 11:24:32 +08:00

cmd_parser.c

drm/i915/gvt: Don't dump partial state in cmd parser

2017-11-16 11:48:33 +08:00

cmd_parser.h

drm/i915/gvt: Factor out scan and shadow from workload dispatch

2017-08-10 10:26:06 +08:00

debug.h

drm/i915/gvt: Make gvt_vgpu_err use pr_err

2017-11-16 11:48:34 +08:00

debugfs.c

drm/i915/gvt: Add new debugfs tool mmio_diff

2017-11-16 11:48:32 +08:00

display.c

drm/i915/gvt: Add framebuffer decoder support

2017-12-04 11:24:33 +08:00

display.h

drm/i915/gvt: Add framebuffer decoder support

2017-12-04 11:24:33 +08:00

dmabuf.c

drm/i915/gvt: Free dmabuf_obj list in intel_vgpu_dmabuf_cleanup

2017-12-04 11:24:34 +08:00

dmabuf.h

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

edid.c

drm/i915/gvt: Fix guest fail to read EDID leading to black guest console issue.

2017-03-21 10:50:02 +08:00

edid.h

drm/i915/gvt: Fix static checker warning on intel_gvt_i2c_handle_aux_ch_write()

2016-11-14 18:06:44 +08:00

execlist.c

drm/i915/gvt: Convert macro queue_workload to a function

2017-12-04 11:24:34 +08:00

execlist.h

drm/i915/gvt: Make elsp_dwords in the right order

2017-11-16 11:46:07 +08:00

fb_decoder.c

drm/i915/gvt: Introduce KBL to dma-buf on Gvt-g

2017-12-04 11:24:34 +08:00

fb_decoder.h

drm/i915/gvt: Add framebuffer decoder support

2017-12-04 11:24:33 +08:00

firmware.c

drm/i915/gvt: Add mmio iterator intel_gvt_for_each_tracked_mmio()

2017-11-16 11:48:32 +08:00

gtt.c

Revert "drm/i915/gvt: Refine broken PPGTT scratch"

2017-11-16 11:48:35 +08:00

gtt.h

Revert "drm/i915/gvt: Refine broken PPGTT scratch"

2017-11-16 11:48:35 +08:00

gvt.c

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

gvt.h

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

handlers.c

drm/i915/gvt: fix off-by-one comparison of ring_id

2017-12-05 11:45:06 +08:00

hypercall.h

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

interrupt.c

drm/i915/gvt: Change flood gvt dmesg into trace

2017-06-08 13:59:16 +08:00

interrupt.h

drm/i915/gvt: vGPU command scanner

2016-10-14 18:15:25 +08:00

kvmgt.c

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

Makefile

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

mmio.c

drm/i915/gvt: Factor intel_vgpu_page_track

2017-11-16 11:48:22 +08:00

mmio.h

drm/i915/gvt: Add mmio iterator intel_gvt_for_each_tracked_mmio()

2017-11-16 11:48:32 +08:00

mpt.h

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00

opregion.c

drm/i915/gvt: Add opregion support

2017-12-04 11:24:32 +08:00

reg.h

drm/i915/gvt: Use I915_GTT_PAGE_SIZE

2017-11-16 11:48:22 +08:00

render.c

drm/i915/gvt: Reduce rcs mocs switch latency

2017-11-16 11:48:33 +08:00

render.h

drm/i915/gvt: implement per-vm mmio switching optimization

2017-06-08 13:59:15 +08:00

sched_policy.c

drm/i915/gvt: Kick scheduler when new workload queued

2017-12-04 11:24:35 +08:00

sched_policy.h

drm/i915/gvt: Kick scheduler when new workload queued

2017-12-04 11:24:35 +08:00

scheduler.c

drm/i915/gvt: set max priority for gvt context

2017-12-04 11:24:35 +08:00

scheduler.h

drm/i915/gvt: Convert macro queue_workload to a function

2017-12-04 11:24:34 +08:00

trace_points.c

drm/i915/gvt: trace stub

2016-10-14 18:12:11 +08:00

trace.h

drm/i915/gvt: Change flood gvt dmesg into trace

2017-06-08 13:59:16 +08:00

vgpu.c

drm/i915/gvt: Dmabuf support for GVT-g

2017-12-04 11:24:33 +08:00