<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/drivers/gpu/drm/vmwgfx, branch v3.3</title>
<subtitle>Mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
</subtitle>
<id>https://git.shady.money/linux/atom?h=v3.3</id>
<link rel='self' href='https://git.shady.money/linux/atom?h=v3.3'/>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/'/>
<updated>2012-01-30T09:32:39Z</updated>
<entry>
<title>vmwgfx: Fix assignment in vmw_framebuffer_create_handle</title>
<updated>2012-01-30T09:32:39Z</updated>
<author>
<name>Ryan Mallon</name>
<email>rmallon@gmail.com</email>
</author>
<published>2012-01-27T21:51:40Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=bf9c05d5b6d19b3e4c9fe21047694e94f48db89b'/>
<id>urn:sha1:bf9c05d5b6d19b3e4c9fe21047694e94f48db89b</id>
<content type='text'>
The assignment of handle in vmw_framebuffer_create_handle doesn't actually do anything useful and is incorrectly assigning an integer value to a pointer argument. It appears that this is a typo and should be dereferencing handle rather than assigning to it directly. This fixes a bug where an undefined handle value is potentially returned to user-space.

Signed-off-by: Ryan Mallon &lt;rmallon@gmail.com&gt;
Reviewed-by: Jakob Bornecrantz&lt;jakob@vmware.com&gt;
Cc: stable@vger.kernel.org
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>Merge branch 'drm-core-next' of git://people.freedesktop.org/~airlied/linux</title>
<updated>2012-01-10T19:04:36Z</updated>
<author>
<name>Linus Torvalds</name>
<email>torvalds@linux-foundation.org</email>
</author>
<published>2012-01-10T19:04:36Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=1a464cbb3d483f2f195b614cffa4aa1b910a0440'/>
<id>urn:sha1:1a464cbb3d483f2f195b614cffa4aa1b910a0440</id>
<content type='text'>
* 'drm-core-next' of git://people.freedesktop.org/~airlied/linux: (307 commits)
  drm/nouveau/pm: fix build with HWMON off
  gma500: silence gcc warnings in mid_get_vbt_data()
  drm/ttm: fix condition (and vs or)
  drm/radeon: double lock typo in radeon_vm_bo_rmv()
  drm/radeon: use after free in radeon_vm_bo_add()
  drm/sis|via: don't return stack garbage from free_mem ioctl
  drm/radeon/kms: remove pointless CS flags priority struct
  drm/radeon/kms: check if vm is supported in VA ioctl
  drm: introduce drm_can_sleep and use in intel/radeon drivers. (v2)
  radeon: Fix disabling PCI bus mastering on big endian hosts.
  ttm: fix agp since ttm tt rework
  agp: Fix multi-line warning message whitespace
  drm/ttm/dma: Fix accounting error when calling ttm_mem_global_free_page and don't try to free freed pages.
  drm/ttm/dma: Only call set_pages_array_wb when the page is not in WB pool.
  drm/radeon/kms: sync across multiple rings when doing bo moves v3
  drm/radeon/kms: Add support for multi-ring sync in CS ioctl (v2)
  drm/radeon: GPU virtual memory support v22
  drm: make DRM_UNLOCKED ioctls with their own mutex
  drm: no need to hold global mutex for static data
  drm/radeon/benchmark: common modes sweep ignores 640x480@32
  ...

Fix up trivial conflicts in radeon/evergreen.c and vmwgfx/vmwgfx_kms.c
</content>
</entry>
<entry>
<title>vmwgfx: fix incorrect VRAM size check in vmw_kms_fb_create()</title>
<updated>2011-12-22T12:31:02Z</updated>
<author>
<name>Xi Wang</name>
<email>xi.wang@gmail.com</email>
</author>
<published>2011-12-21T10:18:33Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=8a78389651b3e411ec5a7df61404734f52d6f4eb'/>
<id>urn:sha1:8a78389651b3e411ec5a7df61404734f52d6f4eb</id>
<content type='text'>
Commit e133e737 didn't correctly fix the integer overflow issue.

-	unsigned int required_size;
+	u64 required_size;
	...
	required_size = mode_cmd-&gt;pitch * mode_cmd-&gt;height;
-	if (unlikely(required_size &gt; dev_priv-&gt;vram_size)) {
+	if (unlikely(required_size &gt; (u64) dev_priv-&gt;vram_size)) {

Note that both pitch and height are u32.  Their product is still u32 and
would overflow before being assigned to required_size.  A correct way is
to convert pitch and height to u64 before the multiplication.

	required_size = (u64)mode_cmd-&gt;pitch * (u64)mode_cmd-&gt;height;

This patch calls the existing vmw_kms_validate_mode_vram() for
validation.

Signed-off-by: Xi Wang &lt;xi.wang@gmail.com&gt;
Reviewed-and-tested-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>Merge remote-tracking branch 'pfdo/drm-fixes' into drm-core-next</title>
<updated>2011-12-21T09:50:56Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2011-12-21T09:50:56Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=4cf73129cbe001b41be2f8b56f763fbf3acaa4ce'/>
<id>urn:sha1:4cf73129cbe001b41be2f8b56f763fbf3acaa4ce</id>
<content type='text'>
-next reported a messy merge, so I've merged my upstream pull into
my -next tree.

Conflicts:
	drivers/gpu/drm/vmwgfx/vmwgfx_kms.c
</content>
</entry>
<entry>
<title>Merge tag 'v3.2-rc6' of /home/airlied/devel/kernel/linux-2.6 into drm-core-next</title>
<updated>2011-12-20T14:43:53Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2011-12-20T14:43:53Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=1fbe6f625f69e48c4001051dc1431afc704acfaa'/>
<id>urn:sha1:1fbe6f625f69e48c4001051dc1431afc704acfaa</id>
<content type='text'>
Merge in the upstream tree to bring in the mainline fixes.

Conflicts:
	drivers/gpu/drm/exynos/exynos_drm_fbdev.c
	drivers/gpu/drm/nouveau/nouveau_sgdma.c
</content>
</entry>
<entry>
<title>drm: Replace pitch with pitches[] in drm_framebuffer</title>
<updated>2011-12-20T10:06:27Z</updated>
<author>
<name>Ville Syrjälä</name>
<email>ville.syrjala@linux.intel.com</email>
</author>
<published>2011-12-19T22:06:49Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=01f2c7730e188077026c5f766f85f329c7000c54'/>
<id>urn:sha1:01f2c7730e188077026c5f766f85f329c7000c54</id>
<content type='text'>
Otherwise each driver would need to keep the information inside
their own framebuffer object structure. Also add offsets[]. BOs
on the other hand are driver specific, so those can be kept in
driver specific structures.

Signed-off-by: Ville Syrjälä &lt;ville.syrjala@linux.intel.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>vmwgfx: Clip cliprects against screen boundaries in present and dirty</title>
<updated>2011-12-19T14:06:05Z</updated>
<author>
<name>Jakob Bornecrantz</name>
<email>jakob@vmware.com</email>
</author>
<published>2011-11-28T12:19:15Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=6abff3c78051e40130a1c653f874fb12b9d40254'/>
<id>urn:sha1:6abff3c78051e40130a1c653f874fb12b9d40254</id>
<content type='text'>
Signed-off-by: Jakob Bornecrantz &lt;jakob@vmware.com&gt;
Reviewed-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>vmwgfx: Resend the cursor after legacy modeset</title>
<updated>2011-12-19T14:06:04Z</updated>
<author>
<name>Jakob Bornecrantz</name>
<email>jakob@vmware.com</email>
</author>
<published>2011-11-28T12:19:14Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=bfc2638dc05f2b27538e40821fdbc8399730b1ea'/>
<id>urn:sha1:bfc2638dc05f2b27538e40821fdbc8399730b1ea</id>
<content type='text'>
Signed-off-by: Jakob Bornecrantz &lt;jakob@vmware.com&gt;
Reviewed-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>vmwgfx: Do better culling of presents</title>
<updated>2011-12-19T14:06:03Z</updated>
<author>
<name>Jakob Bornecrantz</name>
<email>jakob@vmware.com</email>
</author>
<published>2011-11-28T12:19:13Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=203dc2201326fa64411158c84ab0745546300310'/>
<id>urn:sha1:203dc2201326fa64411158c84ab0745546300310</id>
<content type='text'>
Signed-off-by: Jakob Bornecrantz &lt;jakob@vmware.com&gt;
Reviewed-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
<entry>
<title>vmwgfx: Refactor kms code to use vmw_user_lookup_handle helper</title>
<updated>2011-12-19T14:06:03Z</updated>
<author>
<name>Jakob Bornecrantz</name>
<email>jakob@vmware.com</email>
</author>
<published>2011-11-28T12:19:12Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=e7ac9211f29f2fc2e7d11586a33267d2a26d3f2f'/>
<id>urn:sha1:e7ac9211f29f2fc2e7d11586a33267d2a26d3f2f</id>
<content type='text'>
Signed-off-by: Jakob Bornecrantz &lt;jakob@vmware.com&gt;
Signed-off-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
</content>
</entry>
</feed>
