New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 836937 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Apr 2018
Cc:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Backport overflow fix for udl to our kernels

Project Member Reported by marc...@chromium.org, Apr 25 2018

Issue description

Owner: marc...@chromium.org
Status: Started (was: Untriaged)
4 backports up for review
Project Member

Comment 2 by bugdroid1@chromium.org, Apr 26 2018

Labels: merge-merged-chromeos-3.14
The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/abe8332b8923838c572c469e67baf8b56c0f3e09

commit abe8332b8923838c572c469e67baf8b56c0f3e09
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Thu Apr 26 06:00:26 2018

UPSTREAM: drm: udl: Properly check framebuffer mmap offsets

The memmap options sent to the udl framebuffer driver were not being
checked for all sets of possible crazy values.  Fix this up by properly
bounding the allowed values.

Reported-by: Eyal Itkin <eyalit@checkpoint.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com
(cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8)
Signed-off-by: Stphane Marchesin <marcheu@chromium.org>

BUG= chromium:836937 
TEST=compiles on samus

Change-Id: Ic9b7b53fbd017fc3e8517ecc50ecd9d33d7f5822
Reviewed-on: https://chromium-review.googlesource.com/1029221
Commit-Ready: Stéphane Marchesin <marcheu@chromium.org>
Tested-by: Stéphane Marchesin <marcheu@chromium.org>
Reviewed-by: Dominik Behr <dbehr@google.com>

[modify] https://crrev.com/abe8332b8923838c572c469e67baf8b56c0f3e09/drivers/gpu/drm/udl/udl_fb.c

Project Member

Comment 3 by bugdroid1@chromium.org, Apr 26 2018

Labels: merge-merged-chromeos-3.8
The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/716f843b8b9cf804a957d4caa8e781cd91b78f35

commit 716f843b8b9cf804a957d4caa8e781cd91b78f35
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Thu Apr 26 06:00:29 2018

UPSTREAM: drm: udl: Properly check framebuffer mmap offsets

The memmap options sent to the udl framebuffer driver were not being
checked for all sets of possible crazy values.  Fix this up by properly
bounding the allowed values.

Reported-by: Eyal Itkin <eyalit@checkpoint.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com
(cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8)
Signed-off-by: Stphane Marchesin <marcheu@chromium.org>

BUG= chromium:836937 
TEST=compiles on link

Change-Id: Ibbce471af46200023e0b777b92464b559dcb31be
Reviewed-on: https://chromium-review.googlesource.com/1029224
Commit-Ready: Stéphane Marchesin <marcheu@chromium.org>
Tested-by: Stéphane Marchesin <marcheu@chromium.org>
Reviewed-by: Dominik Behr <dbehr@google.com>

[modify] https://crrev.com/716f843b8b9cf804a957d4caa8e781cd91b78f35/drivers/gpu/drm/udl/udl_fb.c

Project Member

Comment 4 by bugdroid1@chromium.org, Apr 26 2018

Labels: merge-merged-chromeos-3.10
The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c

commit 2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Thu Apr 26 08:27:35 2018

UPSTREAM: drm: udl: Properly check framebuffer mmap offsets

The memmap options sent to the udl framebuffer driver were not being
checked for all sets of possible crazy values.  Fix this up by properly
bounding the allowed values.

Reported-by: Eyal Itkin <eyalit@checkpoint.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com
(cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8)
Signed-off-by: Stphane Marchesin <marcheu@chromium.org>

BUG= chromium:836937 
TEST=compiles on nyan_big

Change-Id: I50ff1da4d572cd3b19f8fce713c0a88f48181e3c
Reviewed-on: https://chromium-review.googlesource.com/1029219
Commit-Ready: Stéphane Marchesin <marcheu@chromium.org>
Tested-by: Stéphane Marchesin <marcheu@chromium.org>
Reviewed-by: Dominik Behr <dbehr@google.com>

[modify] https://crrev.com/2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c/drivers/gpu/drm/udl/udl_fb.c

Project Member

Comment 5 by bugdroid1@chromium.org, Apr 26 2018

Labels: merge-merged-chromeos-3.18
The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/2a929ad9a3f80446f3e6e4268aeb0dd25124bccc

commit 2a929ad9a3f80446f3e6e4268aeb0dd25124bccc
Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Thu Apr 26 08:27:31 2018

UPSTREAM: drm: udl: Properly check framebuffer mmap offsets

The memmap options sent to the udl framebuffer driver were not being
checked for all sets of possible crazy values.  Fix this up by properly
bounding the allowed values.

Reported-by: Eyal Itkin <eyalit@checkpoint.com>
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com
(cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8)
Signed-off-by: Stphane Marchesin <marcheu@chromium.org>

BUG= chromium:836937 
TEST=compiles on caroline

Change-Id: I2577e08534da99f750d1ef4035d2b780abdcf474
Reviewed-on: https://chromium-review.googlesource.com/1029223
Commit-Ready: Stéphane Marchesin <marcheu@chromium.org>
Tested-by: Stéphane Marchesin <marcheu@chromium.org>
Reviewed-by: Dominik Behr <dbehr@google.com>

[modify] https://crrev.com/2a929ad9a3f80446f3e6e4268aeb0dd25124bccc/drivers/gpu/drm/udl/udl_fb.c

Status: Fixed (was: Started)

Sign in to add a comment