shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 11:13:02 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
400d4ebeee3ba90f4c90e0d989486cd3f4e7ddee
linux/drivers/gpu/drm
History
Daniel Vetter 363463fbac drm: limit to INT_MAX in create_blob ioctl 
[ Upstream commit 5bf8bec3f4 ]

The hardened usercpy code is too paranoid ever since commit 6a30afa8c1fb
("uaccess: disallow > INT_MAX copy sizes")

Code itself should have been fine as-is.

Link: http://lkml.kernel.org/r/20191106164755.31478-1-daniel.vetter@ffwll.ch
Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
Reported-by: syzbot+fb77e97ebf0612ee6914@syzkaller.appspotmail.com
Fixes: 6a30afa8c1fb ("uaccess: disallow > INT_MAX copy sizes")
Cc: Kees Cook <keescook@chromium.org>
Cc: Alexander Viro <viro@zeniv.linux.org.uk>
Cc: Stephen Rothwell <sfr@canb.auug.org.au>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-15 16:30:16 +09:00
..
amd
drm/amdgpu: Check for valid number of registers to read
2023-05-15 14:47:55 +09:00
arc
drm/arcpgu: Accommodate adv7511 switch to DRM bridge
2016-11-11 04:31:35 +03:00
arm
drm/arm/hdlcd: Allow a bit of clock tolerance
2023-05-15 13:55:06 +09:00
armada
drm/armada: fix colorkey mode property
2023-05-12 17:06:42 +09:00
ast
drm/ast: Fix connector leak during driver unload
2023-05-15 10:39:25 +09:00
atmel-hlcdc
drm: Add drm_rotation_90_or_270()
2018-08-14 06:22:27 -07:00
bochs
drm: bochs: Don't remove uninitialized fbdev framebuffer
2023-05-15 09:13:17 +09:00
bridge
drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings
2023-05-15 16:18:14 +09:00
cirrus
drm/drivers: add support for using the arch wc mapping API.
2016-10-26 16:48:01 +10:00
etnaviv
etnaviv: fix gem object list corruption
2017-10-05 09:44:03 +02:00
exynos
drm/exynos: decon5433: Fix WINCONx reset value
2023-05-12 17:05:39 +09:00
fsl-dcu
drm/fsl-dcu: enable IRQ before drm_atomic_helper_resume()
2017-12-09 22:01:46 +01:00
gma500
drm/gma500: fix memory disclosures due to uninitialized bytes
2023-05-15 16:18:55 +09:00
hisilicon
drm/hisilicon: Ensure LDI regs are properly configured.
2017-12-05 11:24:35 +01:00
i2c
Revert "drm/i2c: tda998x: don't register the connector"
2016-09-23 03:29:50 -07:00
i810
drm/i810: Prevent underflow in ioctl
2023-05-15 16:15:25 +09:00
i915
drm/i915/cmdparser: Fix jump whitelist clearing
2023-05-15 15:00:13 +09:00
imx
drm/imx: only send event on crtc disable if kept disabled
2023-05-15 13:57:26 +09:00
mediatek
drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
2023-05-15 14:30:13 +09:00
mga
drm/mga: remove device_is_agp callback
2017-04-12 12:41:20 +02:00
mgag200
gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap
2017-11-21 09:23:26 +01:00
msm
drm/msm: Unblock writer if reader closes file
2023-05-15 11:45:26 +09:00
nouveau
drm/nouveau/i2c: Enable i2c pads & busses during preinit
2023-05-15 14:02:17 +09:00
omapdrm
drm/omap: fix memory barrier bug in DMM driver
2023-05-15 09:26:22 +09:00
panel
drm/panel: simple: Fix panel_simple_dsi_probe
2023-05-15 14:05:56 +09:00
qxl
drm: qxl: Don't alloc fbdev if emulation is not supported
2018-03-22 09:17:36 +01:00
r128
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
radeon
drm/radeon: fix r1xx/r2xx register checker for POT textures
2023-05-15 16:17:59 +09:00
rcar-du
drm: rcar-du: Handle event when disabling CRTCs
2018-03-22 09:17:47 +01:00
rockchip
drm/rockchip: Properly adjust to a true clock in adjusted_mode
2023-05-15 14:06:14 +09:00
savage
drm/savage: dereferencing an error pointer
2017-01-19 20:17:58 +01:00
shmobile
drm/shmobile: make fbdev support really optional
2016-07-18 09:11:37 +02:00
sis
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
sti
drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache
2017-11-21 09:23:23 +01:00
sun4i
drm/sun4i: Set device driver data at bind time for use in unbind
2023-05-15 12:50:00 +09:00
tdfx
drm: Mark up legacy/dri1 drivers with DRM_LEGACY
2016-08-08 10:05:22 +02:00
tegra
drm/tegra: dpaux: Fix error handling
2017-01-19 20:17:58 +01:00
tilcdc
drm/tilcdc: ensure nonatomic iowrite64 is not used
2018-03-24 11:00:24 +01:00
ttm
Merge 4.9.89 into android-4.9
2018-03-22 09:54:47 +01:00
udl
udl-kms: fix crash due to uninitialized memory
2023-05-12 17:16:09 +09:00
vc4
drm/vc4: Fix compilation error reported by kbuild test bot
2023-05-15 12:35:27 +09:00
vgem
drm: Don't swallow error codes in drm_dev_alloc()
2016-09-22 04:03:48 -07:00
via
mm: replace get_user_pages() write/force parameters with gup_flags
2016-10-19 08:11:43 -07:00
virtio
drm/virtio: Add memory barriers for capset cache.
2023-05-15 14:06:11 +09:00
vmwgfx
drm/vmwgfx: Fix double free in vmw_recv_msg()
2023-05-15 14:29:02 +09:00
ati_pcigart.c
…
drm_agpsupport.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_atomic_helper.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_atomic.c
drm/atomic: Handling the case when setting old crtc for plane
2023-05-12 16:43:21 +09:00
drm_auth.c
drm: set is_master to 0 upon drm_new_set_master() failure
2023-05-15 10:05:54 +09:00
drm_blend.c
drm/doc: Polish plane composition property docs
2016-09-22 00:04:02 -07:00
drm_bridge.c
drm: Extract drm_bridge.h
2016-09-19 15:04:15 +02:00
drm_bufs.c
drm/bufs: Fix Spectre v1 vulnerability
2023-05-15 11:22:08 +09:00
drm_cache.c
drm: Restore double clflush on the last partial cacheline
2016-07-12 15:57:13 +02:00
drm_color_mgmt.c
drm/doc: Document color space handling
2016-09-22 00:04:03 -07:00
drm_connector.c
drm: Add Content Protection property
2018-07-05 05:19:57 -07:00
drm_context.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_crtc_helper_internal.h
drm/fb-helper: Fix sparse warnings
2016-09-19 16:45:15 +02:00
drm_crtc_helper.c
drm/kms-helpers: Extract drm_modeset_helper.[hc]
2016-08-16 16:10:19 +02:00
drm_crtc_internal.h
drm: Extract drm_mode_config.[hc]
2018-08-14 19:40:39 -07:00
drm_crtc.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_debugfs.c
gpu: use %pd
2016-08-07 23:38:48 -04:00
drm_dma.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_dp_aux_dev.c
drm: Don't export dp-aux devnode functions
2016-08-16 18:49:26 +02:00
drm_dp_dual_mode_helper.c
drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state
2018-04-29 11:31:56 +02:00
drm_dp_helper.c
drm/psr: Fix missed entry in PSR setup time table.
2018-06-06 16:44:38 +02:00
drm_dp_mst_topology.c
drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
2023-05-15 12:21:46 +09:00
drm_drv.c
drm: drm_minor_register(): Clean up debugfs on failure
2017-11-15 15:53:12 +01:00
drm_edid_load.c
Fix annoyingly awkward typo in drm_edid_load.c
2016-05-30 09:59:28 +02:00
drm_edid.c
drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
2023-05-15 14:50:50 +09:00
drm_encoder_slave.c
…
drm_encoder.c
drm: Fix typo in encoder docs
2016-09-21 13:33:50 +02:00
drm_fb_cma_helper.c
drm: Use drm_format_info() in DRM core code
2018-08-14 19:03:19 -07:00
drm_fb_helper.c
drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
2023-05-15 11:01:50 +09:00
drm_flip_work.c
…
drm_fops.c
drm: Wake up next in drm_read() chain if we are forced to putback the event
2023-05-15 13:36:29 +09:00
drm_fourcc.c
drm: WARN when calling drm_format_info() for an unsupported format
2018-08-14 19:38:01 -07:00
drm_framebuffer.c
drm: Nuke modifier[1-3]
2018-08-14 19:41:01 -07:00
drm_gem_cma_helper.c
drm: Wrap direct calls to driver->gem_free_object from CMA
2016-06-01 15:00:28 +10:00
drm_gem.c
drm/i915: Prevent writing into a read-only object via a GGTT mmap
2023-05-15 14:59:44 +09:00
drm_global.c
drm: modify drm_global_item_ref to avoid two times of writing ref->object
2016-09-14 15:10:29 -04:00
drm_hashtab.c
drm: fix signed integer overflow
2016-09-06 13:56:41 -04:00
drm_info.c
drm: Print device information again in debugfs
2016-10-17 16:20:53 +10:00
drm_internal.h
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_ioc32.c
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_ioctl.c
drm/ioctl: Fix Spectre v1 vulnerabilities
2023-05-15 10:45:38 +09:00
drm_irq.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_kms_helper_common.c
drm: Don't export dp-aux devnode functions
2016-08-16 18:49:26 +02:00
drm_legacy.h
drm: Hide hw.lock cleanup in filp->release better
2016-06-16 10:16:37 +02:00
drm_lock.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_memory.c
drm: Fix broken use of _PAGE_NO_CACHE on powerpc
2016-07-12 13:20:39 +02:00
drm_mipi_dsi.c
drm/dsi: Implement DCS set/get display brightness
2016-08-24 13:34:00 +02:00
drm_mm.c
drm: Apply range restriction after color adjustment when allocation
2017-11-30 08:39:13 +00:00
drm_mode_config.c
drm: Create a format/modifier blob
2018-08-14 19:42:25 -07:00
drm_mode_object.c
drm: Move property validation to a helper, v2.
2016-09-12 10:32:49 -04:00
drm_modes.c
drm/modes: Prevent division by zero htotal
2023-05-15 11:30:18 +09:00
drm_modeset_helper.c
drm: Plumb modifiers through plane init
2018-08-14 19:41:41 -07:00
drm_modeset_lock.c
drm: Require __GFP_NOFAIL for the legacy drm_modeset_lock_all
2018-02-25 11:05:41 +01:00
drm_of.c
…
drm_panel.c
drm/panel: Flesh out kerneldoc
2016-05-06 16:04:48 +02:00
drm_pci.c
drm: Don't swallow error codes in drm_dev_alloc()
2016-09-22 04:03:48 -07:00
drm_plane_helper.c
drm: Fix kerneldoc in drm_plane_helper.c
2016-08-16 18:50:04 +02:00
drm_plane.c
Amlogic: sync the code from mainline. [1/1]
2020-02-04 13:48:58 +09:00
drm_platform.c
drm: Don't swallow error codes in drm_dev_alloc()
2016-09-22 04:03:48 -07:00
drm_prime.c
drm: Fix up kerneldoc for new drm_gem_dmabuf_export()
2016-10-10 11:19:42 +02:00
drm_print.c
drm: add helper for printing to log or seq_file
2018-08-14 19:38:46 -07:00
drm_probe_helper.c
drm: Flush output polling on shutdown
2023-05-15 14:32:12 +09:00
drm_property.c
drm: limit to INT_MAX in create_blob ioctl
2023-05-15 16:30:16 +09:00
drm_rect.c
drm: Warn about negative sizes when calculating scale factor
2016-08-08 14:17:56 -04:00
drm_scatter.c
drm: Used DRM_LEGACY for all legacy functions
2016-08-08 10:05:23 +02:00
drm_simple_kms_helper.c
drm: Plumb modifiers through plane init
2018-08-14 19:41:41 -07:00
drm_sysfs.c
drm: drop obsolete drm_core.h
2016-09-19 13:57:38 +02:00
drm_trace_points.c
…
drm_trace.h
…
drm_vm.c
drm: Fix broken use of _PAGE_NO_CACHE on powerpc
2016-07-12 13:20:39 +02:00
drm_vma_manager.c
drm: use drm_file to tag vm-bos
2016-09-19 11:22:08 +02:00
Kconfig
BACKPORT: drm/fence: add in-fences support
2017-05-23 15:47:18 -07:00
Makefile
drm: Extract drm_mode_config.[hc]
2018-08-14 19:40:39 -07:00