Backport overflow fix for udl to our kernels |
||||||
Issue description
,
Apr 26 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/kernel/+/abe8332b8923838c572c469e67baf8b56c0f3e09 commit abe8332b8923838c572c469e67baf8b56c0f3e09 Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date: Thu Apr 26 06:00:26 2018 UPSTREAM: drm: udl: Properly check framebuffer mmap offsets The memmap options sent to the udl framebuffer driver were not being checked for all sets of possible crazy values. Fix this up by properly bounding the allowed values. Reported-by: Eyal Itkin <eyalit@checkpoint.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch> Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com (cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8) Signed-off-by: Stphane Marchesin <marcheu@chromium.org> BUG= chromium:836937 TEST=compiles on samus Change-Id: Ic9b7b53fbd017fc3e8517ecc50ecd9d33d7f5822 Reviewed-on: https://chromium-review.googlesource.com/1029221 Commit-Ready: Stéphane Marchesin <marcheu@chromium.org> Tested-by: Stéphane Marchesin <marcheu@chromium.org> Reviewed-by: Dominik Behr <dbehr@google.com> [modify] https://crrev.com/abe8332b8923838c572c469e67baf8b56c0f3e09/drivers/gpu/drm/udl/udl_fb.c
,
Apr 26 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/kernel/+/716f843b8b9cf804a957d4caa8e781cd91b78f35 commit 716f843b8b9cf804a957d4caa8e781cd91b78f35 Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date: Thu Apr 26 06:00:29 2018 UPSTREAM: drm: udl: Properly check framebuffer mmap offsets The memmap options sent to the udl framebuffer driver were not being checked for all sets of possible crazy values. Fix this up by properly bounding the allowed values. Reported-by: Eyal Itkin <eyalit@checkpoint.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch> Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com (cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8) Signed-off-by: Stphane Marchesin <marcheu@chromium.org> BUG= chromium:836937 TEST=compiles on link Change-Id: Ibbce471af46200023e0b777b92464b559dcb31be Reviewed-on: https://chromium-review.googlesource.com/1029224 Commit-Ready: Stéphane Marchesin <marcheu@chromium.org> Tested-by: Stéphane Marchesin <marcheu@chromium.org> Reviewed-by: Dominik Behr <dbehr@google.com> [modify] https://crrev.com/716f843b8b9cf804a957d4caa8e781cd91b78f35/drivers/gpu/drm/udl/udl_fb.c
,
Apr 26 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/kernel/+/2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c commit 2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date: Thu Apr 26 08:27:35 2018 UPSTREAM: drm: udl: Properly check framebuffer mmap offsets The memmap options sent to the udl framebuffer driver were not being checked for all sets of possible crazy values. Fix this up by properly bounding the allowed values. Reported-by: Eyal Itkin <eyalit@checkpoint.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch> Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com (cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8) Signed-off-by: Stphane Marchesin <marcheu@chromium.org> BUG= chromium:836937 TEST=compiles on nyan_big Change-Id: I50ff1da4d572cd3b19f8fce713c0a88f48181e3c Reviewed-on: https://chromium-review.googlesource.com/1029219 Commit-Ready: Stéphane Marchesin <marcheu@chromium.org> Tested-by: Stéphane Marchesin <marcheu@chromium.org> Reviewed-by: Dominik Behr <dbehr@google.com> [modify] https://crrev.com/2b59fd54f3ca0ebfea4f7ed2d3ab91303657cc6c/drivers/gpu/drm/udl/udl_fb.c
,
Apr 26 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/kernel/+/2a929ad9a3f80446f3e6e4268aeb0dd25124bccc commit 2a929ad9a3f80446f3e6e4268aeb0dd25124bccc Author: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Date: Thu Apr 26 08:27:31 2018 UPSTREAM: drm: udl: Properly check framebuffer mmap offsets The memmap options sent to the udl framebuffer driver were not being checked for all sets of possible crazy values. Fix this up by properly bounding the allowed values. Reported-by: Eyal Itkin <eyalit@checkpoint.com> Cc: stable <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch> Link: https://patchwork.freedesktop.org/patch/msgid/20180321154553.GA18454@kroah.com (cherry picked from commit 3b82a4db8eaccce735dffd50b4d4e1578099b8e8) Signed-off-by: Stphane Marchesin <marcheu@chromium.org> BUG= chromium:836937 TEST=compiles on caroline Change-Id: I2577e08534da99f750d1ef4035d2b780abdcf474 Reviewed-on: https://chromium-review.googlesource.com/1029223 Commit-Ready: Stéphane Marchesin <marcheu@chromium.org> Tested-by: Stéphane Marchesin <marcheu@chromium.org> Reviewed-by: Dominik Behr <dbehr@google.com> [modify] https://crrev.com/2a929ad9a3f80446f3e6e4268aeb0dd25124bccc/drivers/gpu/drm/udl/udl_fb.c
,
Apr 30 2018
|
||||||
►
Sign in to add a comment |
||||||
Comment 1 by marc...@chromium.org
, Apr 26 2018Status: Started (was: Untriaged)