Dave Airlie 1922756124 drm: fix unsigned vs signed comparison issue in modeset ctl ioctl. ...

This fixes CVE-2011-1013.

Reported-by: Matthiew Herrb (OpenBSD X.org team)
Cc: stable@kernel.org
Signed-off-by: Dave Airlie <airlied@redhat.com>

2011-02-28 15:24:35 +10:00

..

i2c

…

ttm

drm/ttm: Fix up io_mem_reserve / io_mem_free calling

2010-11-22 13:25:22 +10:00

drm_buffer.h

…

drm_cache.h

…

drm_core.h

…

drm_crtc_helper.h

drm, kdb, kms: Change mode_set_base_atomic() enter argument to be an enum

2010-10-19 14:13:33 +10:00

drm_crtc.h

drm: Add an interface to reset the device

2011-01-25 19:23:28 +00:00

drm_dp_helper.h

drm/i915: fetch eDP configuration data from the VBT

2010-10-08 10:28:21 +01:00

drm_edid.h

…

drm_encoder_slave.h

…

drm_fb_helper.h

Revert "drm: Update fbdev fb_fix_screeninfo"

2011-01-14 16:10:28 -08:00

drm_fixed.h

…

drm_global.h

…

drm_hashtab.h

…

drm_mem_util.h

…

drm_memory.h

…

drm_mm.h

drm_mm: add support for range-restricted fair-lru scans

2010-10-27 23:31:04 +01:00

drm_mode.h

…

drm_os_linux.h

…

drm_pciids.h

drm/radeon: remove 0x4243 pci id

2011-02-02 12:50:41 +10:00

drm_sarea.h

…

drm_sman.h

…

drm_sysfs.h

…

drm.h

…

drmP.h

drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.

2011-02-28 15:24:35 +10:00

i810_drm.h

…

i830_drm.h

drm: block userspace under allocating buffer and having drivers overwrite it (v2)

2010-08-17 14:52:25 +10:00

i915_drm.h

drm/i915: Allow the application to choose the constant addressing mode

2010-12-20 09:41:36 +00:00

intel-gtt.h

intel-gtt: export api for drm/i915

2010-11-23 20:14:47 +00:00

Kbuild

include: replace unifdef-y with header-y

2010-08-14 22:26:51 +02:00

mga_drm.h

drm: block userspace under allocating buffer and having drivers overwrite it (v2)

2010-08-17 14:52:25 +10:00

nouveau_drm.h

drm/nouveau: remove some useless GETPARAMs

2010-12-03 15:11:57 +10:00

r128_drm.h

…

radeon_drm.h

drm/radeon/kms: add new radeon_info ioctl query for clock crystal freq

2011-01-25 08:41:04 +10:00

savage_drm.h

drm: block userspace under allocating buffer and having drivers overwrite it (v2)

2010-08-17 14:52:25 +10:00

sis_drm.h

…

via_drm.h

…

vmwgfx_drm.h

drm/vmwgfx: Add a parameter to get the max fb size

2010-10-06 11:29:58 +10:00