[git pull] vmwgfx-fixes-4.15

* [git pull] vmwgfx-fixes-4.15
@ 2018-01-10 15:03 Thomas Hellstrom
  0 siblings, 0 replies; only message in thread
From: Thomas Hellstrom @ 2018-01-10 15:03 UTC (permalink / raw)
  To: airlied, airlied; +Cc: Thomas Hellstrom, linux-graphics-maintainer, dri-devel

Dave,
Two important fixes for vmwgfx.
The off-by-one fix could cause a malicious user to potentially crash the
kernel.
The framebuffer map cache fix can under some circumstances enable a user to
read from or write to freed pages.

The following changes since commit b0bb222440a5c8273f67dd37946707e6ba6ad832:

  Merge branch 'linux-4.15' of git://github.com/skeggsb/linux into drm-fixes (2018-01-09 12:03:10 +1000)

are available in the git repository at:

  git://people.freedesktop.org/~thomash/linux vmwgfx-fixes-4.15

for you to fetch changes up to 0d9cac0ca0429830c40fe1a4e50e60f6221fd7b6:

  drm/vmwgfx: Potential off by one in vmw_view_add() (2018-01-10 15:21:39 +0100)

----------------------------------------------------------------
Dan Carpenter (1):
      drm/vmwgfx: Potential off by one in vmw_view_add()

Thomas Hellstrom (1):
      drm/vmwgfx: Don't cache framebuffer maps

 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c |  2 ++
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c     |  6 -----
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.h     |  2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c    | 41 ++++++++++-----------------------
 4 files changed, 15 insertions(+), 36 deletions(-)
_______________________________________________
dri-devel mailing list
dri-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/dri-devel

^ permalink raw reply	[flat|nested] only message in thread