Dan Carpenter 68c4fce737 vmwgfx: corruption in vmw_event_fence_action_create() ...

We don't allocate enough data for this struct.  As soon as we start
modifying event->event on the next lines, then we're going beyond the
end of the memory we allocated.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie <airlied@gmail.com>

2012-09-26 18:40:06 +10:00

..

Kconfig

drm/vmwgfx: allow a kconfig option to choose if fbcon is enabled

2012-09-07 13:24:34 +10:00

Makefile

vmwgfx: Add screen object support

2011-10-05 10:17:14 +01:00

svga3d_reg.h

vmwgfx: Update register files to latest from vmware-sdk

2011-10-05 10:17:08 +01:00

svga_escape.h

vmwgfx: Update register files to latest from vmware-sdk

2011-10-05 10:17:08 +01:00

svga_overlay.h

vmwgfx: Update register files to latest from vmware-sdk

2011-10-05 10:17:08 +01:00

svga_reg.h

vmwgfx: Update register files to latest from vmware-sdk

2011-10-05 10:17:08 +01:00

svga_types.h

drm/vmwgfx: Add svga headers for vmwgfx driver

2009-12-15 08:38:36 +10:00

vmwgfx_buffer.c

drm/ttm: isolate dma data from ttm_tt V4

2011-12-06 10:40:02 +00:00

vmwgfx_dmabuf.c

vmwgfx: Fix up query processing

2011-10-05 10:17:22 +01:00

vmwgfx_drv.c

vmwgfx: add dumb ioctl support

2012-09-13 11:42:31 +10:00

vmwgfx_drv.h

vmwgfx: add dumb ioctl support

2012-09-13 11:42:31 +10:00

vmwgfx_execbuf.c

vmwgfx: Make it possible to get fence from execbuf

2012-02-13 12:01:33 +00:00

vmwgfx_fb.c

vmwgfx: Pick up the initial size from the width and height regs

2012-02-13 12:01:35 +00:00

vmwgfx_fence.c

vmwgfx: corruption in vmw_event_fence_action_create()

2012-09-26 18:40:06 +10:00

vmwgfx_fence.h

vmwgfx: Move function declaration to correct header

2012-02-13 12:01:36 +00:00

vmwgfx_fifo.c

vmwgfx: Use the revised fifo hw version register when present

2011-12-19 14:06:00 +00:00

vmwgfx_gmr.c

drm/vmwgfx: Fix nasty write past alloced memory area

2012-06-01 17:00:20 +01:00

vmwgfx_gmrid_manager.c

vmwgfx: Restrict number of GMR pages to device limit

2011-09-01 09:38:07 +01:00

vmwgfx_ioctl.c

vmwgfx: Remove dmabuf check in present ioctl

2011-12-19 14:06:01 +00:00

vmwgfx_irq.c

vmwgfx: Add fence events

2011-10-10 15:46:55 +01:00

vmwgfx_kms.c

drm: stop vmgfx driver explosion

2012-08-22 09:26:50 +10:00

vmwgfx_kms.h

vmwgfx: Add page flip support

2012-02-13 12:01:35 +00:00

vmwgfx_ldu.c

vmwgfx: Pick up the initial size from the width and height regs

2012-02-13 12:01:35 +00:00

vmwgfx_marker.c

vmwgfx: Fix confusion caused by using "fence" in various places

2011-09-06 11:48:40 +01:00

vmwgfx_overlay.c

vmwgfx: minor dmabuf utilities cleanup

2011-10-05 10:17:20 +01:00

vmwgfx_reg.h

drm/vmwgfx: Add DRM driver for VMware Virtual GPU

2009-12-15 08:38:43 +10:00

vmwgfx_resource.c

vmwgfx: add dumb ioctl support

2012-09-13 11:42:31 +10:00

vmwgfx_scrn.c

vmwgfx: Pick up the initial size from the width and height regs

2012-02-13 12:01:35 +00:00

vmwgfx_ttm_glue.c

vmwgfx: Remove the possibility to map the fifo from user-space

2011-09-06 11:48:34 +01:00