Kasin Li 4a630fadbb drm/msm: Fix potential buffer overflow issue ...

In function submit_create, if nr_cmds or nr_bos is assigned with
negative value, the allocated buffer may be small than intended.
Using this buffer will lead to buffer overflow issue.

Signed-off-by: Kasin Li <donglil@codeaurora.org>
Signed-off-by: Jordan Crouse <jcrouse@codeaurora.org>
Signed-off-by: Rob Clark <robdclark@gmail.com>

2017-06-19 19:58:57 -04:00

..

adreno

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

dsi

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

edp

drm/msm: update generated headers

2017-06-16 11:16:07 -04:00

hdmi

drm/msm/hdmi: Fix HDMI pink strip issue seen on 8x96

2017-06-16 11:16:09 -04:00

mdp

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

Kconfig

drm/msm: gpu: Enable zap shader for A5XX

2017-06-16 11:15:31 -04:00

Makefile

drm/msm: fix include notation and remove -Iinclude/drm flag

2017-05-17 14:35:54 +02:00

msm_atomic.c

drm/msm/mdp5: Add cursor planes

2017-02-06 11:28:44 -05:00

msm_debugfs.c

drm/msm/gpu: use pm-runtime

2017-04-08 06:59:31 -04:00

msm_debugfs.h

drm/msm: Remove msm_debugfs_cleanup()

2017-03-08 11:24:45 +01:00

msm_drv.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_drv.h

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_fb.c

drm/msm: pass address-space to _get_iova() and friends

2017-06-16 11:16:04 -04:00

msm_fbdev.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_fence.c

drm/msm: Reuse dma_fence_release.

2017-05-27 13:48:26 -04:00

msm_fence.h

dma-buf: Rename struct fence to dma_fence

2016-10-25 14:40:39 +02:00

msm_gem_prime.c

drm/msm: Expose our reservation object when exporting a dmabuf.

2017-05-27 13:48:26 -04:00

msm_gem_shrinker.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_gem_submit.c

drm/msm: Fix potential buffer overflow issue

2017-06-19 19:58:57 -04:00

msm_gem_vma.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_gem.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_gem.h

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_gpu.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_gpu.h

drm/msm: remove address-space id

2017-06-16 11:16:06 -04:00

msm_iommu.c

drm/msm: pm runtime support for iommu

2017-04-08 06:59:31 -04:00

msm_kms.h

drm/msm: remove address-space id

2017-06-16 11:16:06 -04:00

msm_mmu.h

drm/msm: let gpu wire up it's own fault handler

2017-02-06 11:28:42 -05:00

msm_perf.c

drm/msm: Remove msm_debugfs_cleanup()

2017-03-08 11:24:45 +01:00

msm_rd.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_ringbuffer.c

drm/msm: Separate locking of buffer resources from struct_mutex

2017-06-17 08:03:07 -04:00

msm_ringbuffer.h

…

NOTES

…