Arto Merilainen 3364cd2890 gpu: host1x: Copy gathers before verification ...

The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>

2013-06-22 12:43:53 +02:00

..

drm

drm/tegra: Remove DRIVER_BUS_PLATFORM from driver_features

2013-06-22 12:43:51 +02:00

hw

gpu: host1x: Add debug support

2013-04-22 12:32:46 +02:00

cdma.c

gpu: host1x: Add debug support

2013-04-22 12:32:46 +02:00

cdma.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

channel.c

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

channel.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

debug.c

gpu: host1x: Add debug support

2013-04-22 12:32:46 +02:00

debug.h

gpu: host1x: Add debug support

2013-04-22 12:32:46 +02:00

dev.c

drm/tegra: Add gr2d device

2013-04-22 12:40:04 +02:00

dev.h

gpu: host1x: Remove second host1x driver

2013-04-22 12:39:59 +02:00

host1x_bo.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

host1x_client.h

gpu: host1x: Remove second host1x driver

2013-04-22 12:39:59 +02:00

host1x.h

drm/tegra: Add gr2d device

2013-04-22 12:40:04 +02:00

intr.c

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

intr.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

job.c

gpu: host1x: Copy gathers before verification

2013-06-22 12:43:53 +02:00

job.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00

Kconfig

drm/tegra: Move drm to live under host1x

2013-04-22 12:39:11 +02:00

Makefile

drm/tegra: Add gr2d device

2013-04-22 12:40:04 +02:00

syncpt.c

gpu: host1x: Add debug support

2013-04-22 12:32:46 +02:00

syncpt.h

gpu: host1x: Add channel support

2013-04-22 12:32:43 +02:00