mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-02-17 03:07:53 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
32b415a9dc2c212e809b7ebc2b14bc3fbda2b9af
linux/drivers/gpu/drm
History
Ian Forbes 32b415a9dc drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE 
This data originates from userspace and is used in buffer offset
calculations which could potentially overflow causing an out-of-bounds
access.

Fixes: 8ce75f8ab9 ("drm/vmwgfx: Update device includes for DX device functionality")
Reported-by: Rohit Keshri <rkeshri@redhat.com>
Signed-off-by: Ian Forbes <ian.forbes@broadcom.com>
Reviewed-by: Maaz Mombasawala <maaz.mombasawala@broadcom.com>
Signed-off-by: Zack Rusin <zack.rusin@broadcom.com>
Link: https://patch.msgid.link/20251021190128.13014-1-ian.forbes@broadcom.com
2025-11-06 23:59:40 -05:00
..
adp
drm: convert many bridge drivers from devm_kzalloc() to devm_drm_bridge_alloc() API
2025-05-23 15:03:47 +02:00
amd
drm/amd/display: Fix incorrect return of vblank enable on unconfigured crtc
2025-10-28 11:05:47 -04:00
arm
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
armada
drm/armada: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()
2025-07-16 20:07:32 +03:00
aspeed
drm/aspeed: move to devm_platform_ioremap_resource() usage
2025-02-26 15:27:06 +01:00
ast
drm/ast: Clear preserved bits from register output value
2025-10-30 20:44:44 +01:00
atmel-hlcdc
…
bridge
Merge drm/drm-fixes into drm-misc-fixes
2025-10-14 10:59:58 +02:00
ci
drm/ci: disable broken MR check in sanity job
2025-10-16 07:49:06 -07:00
clients
drm/fbdev-client: Skip DRM clients if modesetting is absent
2025-07-06 14:05:07 +03:00
display
Merge tag 'media/v6.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media
2025-10-02 13:13:26 -07:00
etnaviv
drm/etnaviv: fix flush sequence logic
2025-10-27 22:47:09 +01:00
exynos
drm/exynos: dsi: add support for exynos7870
2025-09-15 20:19:23 +09:00
fsl-dcu
drm/fsl-dcu: move to devm_platform_ioremap_resource() usage
2025-03-06 12:37:33 -05:00
gma500
Merge tag 'drm-next-2025-10-01' of https://gitlab.freedesktop.org/drm/kernel
2025-10-02 12:47:25 -07:00
gud
drm/gud: Replace simple display pipe with DRM atomic helpers
2025-09-01 08:42:51 +02:00
hisilicon
drm/hisilicon/hibmc: fix dp and vga cannot show together
2025-08-17 18:32:31 +03:00
hyperv
drm/hyperv: Add support for drm_panic
2025-06-05 14:59:56 +02:00
i915
drm/i915/dmc: Clear HRR EVT_CTL/HTP to zero on ADL-S
2025-10-28 16:00:19 -04:00
imagination
drm/imagination: Optionally depend on POWER_SEQUENCING
2025-11-03 13:26:44 +00:00
imx
drm/imx: parallel-display: add the bridge before attaching it
2025-10-30 16:55:19 +01:00
ingenic
drm: Pass the format info to .fb_create()
2025-07-16 20:03:14 +03:00
kmb
…
lib
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
lima
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
logicvc
…
loongson
PCI: Add CONFIG_MMU dependency
2025-04-23 15:40:30 -05:00
mcde
drm/mcde: convert to devm_drm_bridge_alloc() API
2025-04-29 11:21:23 +02:00
mediatek
drm/mediatek: Fix device use-after-free on unbind
2025-10-28 14:56:16 +00:00
meson
Merge tag 'drm-misc-next-2025-06-12' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-next
2025-06-18 08:09:35 +10:00
mgag200
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
msm
Merge tag 'drm-msm-fixes-2025-10-29' of https://gitlab.freedesktop.org/drm/msm into drm-fixes
2025-10-31 19:07:39 +01:00
mxsfb
drm/mxsfb: put the bridge returned by drm_bridge_chain_get_first_bridge()
2025-07-22 13:01:28 +02:00
nouveau
drm/nouveau: Advertise correct modifiers on GB20x
2025-11-06 11:02:08 +10:00
nova
Merge tag 'drm-rust-next-2025-09-16' of https://gitlab.freedesktop.org/drm/rust/kernel into drm-next
2025-09-17 16:13:49 +10:00
omapdrm
drm/omapdrm: use drm_bridge_chain_get_last_bridge()
2025-09-02 11:38:29 +02:00
panel
drm/panel: kingdisplay-kd097d04: Disable EoTp
2025-10-29 21:57:42 +01:00
panfrost
Merge drm/drm-next into drm-misc-next
2025-08-20 09:33:06 +02:00
panthor
drm/panthor: Fix kernel panic on partial unmap of a GPU VA region
2025-10-17 13:48:56 +01:00
pl111
drm: pl111: fix inconsistent indenting warning
2025-03-07 10:25:10 +01:00
qxl
drm/gem: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()
2025-07-16 20:05:58 +03:00
radeon
drm/radeon: Remove calls to drm_put_dev()
2025-10-28 11:00:08 -04:00
renesas
drm/rcar-du: dsi: Implement DSI command support
2025-09-08 09:45:01 +03:00
rockchip
drm/rockchip: dw_hdmi: use correct SCLIN mask for RK3228
2025-10-16 17:57:50 +02:00
scheduler
drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
2025-11-05 12:29:52 +01:00
sitronix
drm/st7571-i2c: add support for 2bit grayscale for XRGB8888
2025-09-01 15:35:29 +02:00
solomon
drm/ssd130x: Remove the use of dev_err_probe()
2025-09-01 16:09:19 +02:00
sprd
drm/sprd: move to devm_platform_ioremap_resource() usage
2025-03-10 16:25:01 -04:00
sti
drm/sti: Remove redundant ternary operators
2025-09-05 13:17:21 +02:00
stm
drm/stm: ltdc: handle lvds pixel clock
2025-08-28 17:43:57 +02:00
sun4i
drm: sun4i: de33: mixer: add mixer configuration for the H616
2025-06-02 09:59:10 +02:00
sysfb
drm/sysfb: Remove double assignment to pointer crtc_state
2025-09-04 09:26:39 +02:00
tegra
Revert "drm/tegra: Use dma_buf from GEM object instance"
2025-08-26 10:41:27 +02:00
tests
Merge tag 'v6.17-rc6' into drm-next
2025-09-15 17:51:07 +10:00
tidss
drm/tidss: dispc: Explicitly include bitfield.h
2025-09-03 12:16:04 +03:00
tilcdc
…
tiny
drm/tiny: pixpaper: add explicit dependency on MMU
2025-11-06 13:47:29 +01:00
ttm
ttm/bo: add an API to populate a bo before exporting.
2025-09-11 10:01:38 +10:00
tve200
…
tyr
rust: drm: Introduce the Tyr driver for Arm Mali GPUs
2025-09-11 12:20:03 +00:00
udl
drm/gem-shmem: Do not map s/g table by default
2025-07-07 15:23:41 +02:00
v3d
Merge tag 'drm-next-2025-10-11-1' of https://gitlab.freedesktop.org/drm/kernel
2025-10-10 14:02:14 -07:00
vboxvideo
drm/vboxvideo: Remove unused hgsmi_cursor_position
2025-02-28 09:05:10 +01:00
vc4
drm: Pass the format info to .fb_create()
2025-07-16 20:03:14 +03:00
vgem
drm/vgem/vgem_drv convert to use faux_device
2025-07-07 15:24:14 +02:00
virtio
drm/virtio: clean up minor codestyle issues
2025-08-20 13:36:45 +03:00
vkms
drm/vkms: Add P01* formats
2025-09-05 19:57:26 +02:00
vmwgfx
drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
2025-11-06 23:59:40 -05:00
xe
drm/xe: Do not wake device during a GT reset
2025-10-29 11:43:30 -07:00
xen
drm/gem: Pass along the format info from .fb_create() to drm_helper_mode_fill_fb_struct()
2025-07-16 20:05:58 +03:00
xlnx
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
drm_atomic_helper.c
drm/atomic-helper: put the bridge returned by drm_bridge_chain_get_first_bridge()
2025-07-22 13:01:28 +02:00
drm_atomic_state_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_atomic_uapi.c
drm: re-allow no-op changes on non-primary planes in async flips
2025-08-22 14:31:21 -03:00
drm_atomic.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_auth.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_blend.c
drm/doc: document front-buffer rendering
2025-04-30 23:35:00 +02:00
drm_bridge_helper.c
drm/bridge: Include <linux/export.h>
2025-06-16 09:02:25 +02:00
drm_bridge.c
drm/debugfs: bridges_show: show refcount
2025-09-02 11:18:55 +02:00
drm_buddy.c
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
drm_cache.c
drm/gpu: Remove dead checks on wbinvd_on_all_cpus()'s return value
2025-07-10 13:07:26 +02:00
drm_client_event.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_client_modeset.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_client.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_color_mgmt.c
drm/color-mgmt: Prepare for RGB332 palettes
2025-08-26 09:54:18 +02:00
drm_connector.c
drm/connector: move HDR sink metadata to display info
2025-06-23 21:44:55 +03:00
drm_crtc_helper_internal.h
drm/connector: make mode_valid take a const struct drm_display_mode
2025-01-07 12:45:19 +02:00
drm_crtc_helper.c
drm: Remove redundant statement in drm_crtc_helper_set_mode()
2025-03-27 14:02:57 +02:00
drm_crtc_internal.h
…
drm_crtc.c
drm: add clone mode check for CRTC
2025-01-08 01:39:58 +02:00
drm_damage_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_debugfs_crc.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_debugfs.c
drm: add debugfs support on per client-id basis
2025-07-04 15:59:06 +02:00
drm_displayid_internal.h
drm/edid: Refactor DisplayID timing block structs
2025-04-16 20:40:51 +03:00
drm_displayid.c
…
drm_draw_internal.h
drm/draw: fix color truncation in drm_draw_fill24
2025-10-14 09:25:10 +02:00
drm_draw.c
drm/draw: fix color truncation in drm_draw_fill24
2025-10-14 09:25:10 +02:00
drm_drv.c
Merge drm/drm-next into drm-intel-next
2025-09-10 08:01:42 -04:00
drm_dumb_buffers.c
…
drm_edid_load.c
…
drm_edid.c
Merge tag 'drm-misc-next-2025-06-26' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-next
2025-06-27 09:58:05 +10:00
drm_eld.c
…
drm_encoder.c
…
drm_exec.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_fb_dma_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_fb_helper.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_fbdev_dma.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_fbdev_shmem.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_fbdev_ttm.c
drm/client: Include <linux/export.h>
2025-06-16 09:02:29 +02:00
drm_file.c
drm: add debugfs support on per client-id basis
2025-07-04 15:59:06 +02:00
drm_flip_work.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_format_helper.c
drm/format-helper: introduce drm_fb_xrgb8888_to_gray2()
2025-09-01 15:35:07 +02:00
drm_format_internal.h
drm/format-helper: Split off byte swapping from drm_fb_xrgb8888_to_rgb565()
2025-06-27 15:59:23 +02:00
drm_fourcc.c
drm: Pass pixel_format+modifier directly to drm_get_format_info()
2025-07-16 20:01:13 +03:00
drm_framebuffer.c
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
drm_gem_atomic_helper.c
drm/sysfb: Do not dereference NULL pointer in plane reset
2025-10-26 17:09:56 +01:00
drm_gem_dma_helper.c
Revert "drm/gem-dma: Use dma_buf from GEM object instance"
2025-07-17 12:26:19 +02:00
drm_gem_framebuffer_helper.c
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
drm_gem_shmem_helper.c
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
drm_gem_ttm_helper.c
drm/gem: Include <linux/export.h>
2025-06-16 09:02:35 +02:00
drm_gem_vram_helper.c
drm/gem: Include <linux/export.h>
2025-06-16 09:02:35 +02:00
drm_gem.c
Merge tag 'mm-stable-2025-10-01-19-00' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2025-10-02 18:18:33 -07:00
drm_gpusvm.c
drm/gpusvm, drm/xe: Fix userptr to not allow device private pages
2025-10-02 21:57:52 -07:00
drm_gpuvm.c
Merge tag 'drm-next-2025-10-01' of https://gitlab.freedesktop.org/drm/kernel
2025-10-02 12:47:25 -07:00
drm_internal.h
Merge drm/drm-next into drm-misc-n
2025-08-11 14:37:45 +02:00
drm_ioc32.c
…
drm_ioctl.c
drm: Add DRM prime interface to reassign GEM handle
2025-07-18 08:59:24 +02:00
drm_kms_helper_common.c
…
drm_lease.c
…
drm_managed.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_mipi_dbi.c
drm/format-helper: Split off byte swapping from drm_fb_xrgb8888_to_rgb565()
2025-06-27 15:59:23 +02:00
drm_mipi_dsi.c
drm: Add MIPI read_multi func and two write macros
2025-08-14 15:42:26 -07:00
drm_mm.c
…
drm_mode_config.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_mode_object.c
…
drm_modes.c
Merge tag 'v6.13-rc6' into drm-next
2025-01-10 14:24:17 +10:00
drm_modeset_helper.c
drm: Make passing of format info to drm_helper_mode_fill_fb_struct() mandatory
2025-07-16 20:12:35 +03:00
drm_modeset_lock.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_of.c
drm: of: fix documentation reference
2025-08-21 16:21:08 +02:00
drm_pagemap.c
drm/pagemap: Allocate folios when possible
2025-08-06 13:34:58 +02:00
drm_panel_backlight_quirks.c
drm: panel-backlight-quirks: Add Steam Deck brightness quirk
2025-09-03 10:23:03 -05:00
drm_panel_orientation_quirks.c
drm/panel: Include <linux/export.h>
2025-06-16 09:02:39 +02:00
drm_panel.c
drm/panel: Allow powering on panel follower after panel is enabled
2025-08-25 09:17:49 -07:00
drm_panic_qr.rs
drm/panic: use core::ffi::CStr method names
2025-09-16 09:26:59 +02:00
drm_panic.c
drm/panic: Fix 24bit pixel crossing page boundaries
2025-10-21 11:28:03 +02:00
drm_pci.c
drm: Do not include <linux/export.h>
2025-06-16 09:00:09 +02:00
drm_plane_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_plane.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_prime.c
Merge drm/drm-next into drm-misc-n
2025-08-11 14:37:45 +02:00
drm_print.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_privacy_screen_x86.c
…
drm_privacy_screen.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_probe_helper.c
drm/probe-helper: put the bridge returned by drm_bridge_chain_get_first_bridge()
2025-07-22 13:01:28 +02:00
drm_property.c
…
drm_rect.c
…
drm_self_refresh_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_simple_kms_helper.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_suballoc.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_syncobj.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_sysfs.c
DRM: Add a new 'boot_display' attribute
2025-09-10 09:35:33 -05:00
drm_trace_points.c
…
drm_trace.h
…
drm_vblank_work.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_vblank.c
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
drm_vma_manager.c
drm: Include <linux/export.h>
2025-06-16 09:01:23 +02:00
drm_writeback.c
Merge tag 'drm-next-2025-07-30' of https://gitlab.freedesktop.org/drm/kernel
2025-07-30 19:26:49 -07:00
Kconfig
Merge tag 'hyperv-next-signed-20251006' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
2025-10-07 08:40:15 -07:00
Kconfig.debug
drm/format-helper: Move drm_fb_build_fourcc_list() to sysfb helpers
2025-06-18 10:46:03 +02:00
Makefile
rust: drm: Introduce the Tyr driver for Arm Mali GPUs
2025-09-11 12:20:03 +00:00