<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/drivers/gpu, branch v4.20</title>
<subtitle>Mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
</subtitle>
<id>https://git.shady.money/linux/atom?h=v4.20</id>
<link rel='self' href='https://git.shady.money/linux/atom?h=v4.20'/>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/'/>
<updated>2018-12-20T07:13:29Z</updated>
<entry>
<title>drm/ioctl: Fix Spectre v1 vulnerabilities</title>
<updated>2018-12-20T07:13:29Z</updated>
<author>
<name>Gustavo A. R. Silva</name>
<email>gustavo@embeddedor.com</email>
</author>
<published>2018-12-20T00:00:15Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=505b5240329b922f21f91d5b5d1e535c805eca6d'/>
<id>urn:sha1:505b5240329b922f21f91d5b5d1e535c805eca6d</id>
<content type='text'>
nr is indirectly controlled by user-space, hence leading to a
potential exploitation of the Spectre variant 1 vulnerability.

This issue was detected with the help of Smatch:

drivers/gpu/drm/drm_ioctl.c:805 drm_ioctl() warn: potential spectre issue 'dev-&gt;driver-&gt;ioctls' [r]
drivers/gpu/drm/drm_ioctl.c:810 drm_ioctl() warn: potential spectre issue 'drm_ioctls' [r] (local cap)
drivers/gpu/drm/drm_ioctl.c:892 drm_ioctl_flags() warn: potential spectre issue 'drm_ioctls' [r] (local cap)

Fix this by sanitizing nr before using it to index dev-&gt;driver-&gt;ioctls
and drm_ioctls.

Notice that given that speculation windows are large, the policy is
to kill the speculation on the first load and not worry if it can be
completed with a dependent load/store [1].

[1] https://marc.info/?l=linux-kernel&amp;m=152449131114778&amp;w=2

Cc: stable@vger.kernel.org
Signed-off-by: Gustavo A. R. Silva &lt;gustavo@embeddedor.com&gt;
Signed-off-by: Daniel Vetter &lt;daniel.vetter@ffwll.ch&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181220000015.GA18973@embeddedor
</content>
</entry>
<entry>
<title>Merge branch 'vmwgfx-fixes-4.20' of git://people.freedesktop.org/~thomash/linux into drm-fixes</title>
<updated>2018-12-13T19:37:44Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-13T19:19:25Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=1df07a7f2244947c888dc35bba2b237f714afc56'/>
<id>urn:sha1:1df07a7f2244947c888dc35bba2b237f714afc56</id>
<content type='text'>
One regression fix for avoiding kernel OOM, one cleanup return fix.

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181213122815.10581-1-thellstrom@vmware.com
</content>
</entry>
<entry>
<title>drm/vmwgfx: Protect from excessive execbuf kernel memory allocations v3</title>
<updated>2018-12-13T12:04:25Z</updated>
<author>
<name>Thomas Hellstrom</name>
<email>thellstrom@vmware.com</email>
</author>
<published>2018-12-12T10:52:08Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=fd567467753fac9f9f477550065018e7f4e3c8f3'/>
<id>urn:sha1:fd567467753fac9f9f477550065018e7f4e3c8f3</id>
<content type='text'>
With the new validation code, a malicious user-space app could
potentially submit command streams with enough buffer-object and resource
references in them to have the resulting allocated validion nodes and
relocations make the kernel run out of GFP_KERNEL memory.

Protect from this by having the validation code reserve TTM graphics
memory when allocating.

Signed-off-by: Thomas Hellstrom &lt;thellstrom@vmware.com&gt;
Reviewed-by: Deepak Rawat &lt;drawat@vmware.com&gt;
---
v2: Removed leftover debug printouts
</content>
</entry>
<entry>
<title>Merge branch 'mediatek-drm-fixes-4.20' of https://github.com/ckhu-mediatek/linux.git-tags into drm-fixes</title>
<updated>2018-12-12T23:55:13Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T23:55:05Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=a805ce683f4cd7609730ee169dca38644b70e3fa'/>
<id>urn:sha1:a805ce683f4cd7609730ee169dca38644b70e3fa</id>
<content type='text'>
Single bridge attachment fix.

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: CK Hu &lt;ck.hu@mediatek.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/1544407975.18825.3.camel@mtksdaap41
</content>
</entry>
<entry>
<title>Merge branch 'linux-4.20' of git://github.com/skeggsb/linux into drm-fixes</title>
<updated>2018-12-12T23:33:50Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T23:32:41Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=b5f436e7b4c2fcdb96204dbba346bddc7fc3e850'/>
<id>urn:sha1:b5f436e7b4c2fcdb96204dbba346bddc7fc3e850</id>
<content type='text'>
Three fixes:
tegra regression fix
display flushing fix
mst cleanup fix.

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: Ben Skeggs &lt;skeggsb@gmail.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/CACAvsv7WCPzjQZonk+eS1FgEUKirz-4LOrVpMUVMM=D-GjbVpg@mail.gmail.com
</content>
</entry>
<entry>
<title>Merge branch 'drm-fixes-4.20' of git://people.freedesktop.org/~agd5f/linux into drm-fixes</title>
<updated>2018-12-12T23:24:37Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T23:24:18Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=26eacb788b7e37f9b08e6e6fc9686bf0817c0163'/>
<id>urn:sha1:26eacb788b7e37f9b08e6e6fc9686bf0817c0163</id>
<content type='text'>
Fixes for 4.20:
- Stability fixes for new polaris variants (e.g., RX590)
- New vega pci ids
- Vega20 smu fix
- Ctx locking fix

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: Alex Deucher &lt;alexdeucher@gmail.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181212203022.3054-1-alexander.deucher@amd.com
</content>
</entry>
<entry>
<title>Merge tag 'drm-misc-fixes-2018-12-12' of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes</title>
<updated>2018-12-12T21:25:10Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T21:25:00Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=e59166b59aad95d313cfc4cfe32240f1608b33d4'/>
<id>urn:sha1:e59166b59aad95d313cfc4cfe32240f1608b33d4</id>
<content type='text'>
- rockchip: Revert change causing WARN on shutdown (Brian)

Cc: Brian Norris &lt;briannorris@chromium.org&gt;
Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;

From: Sean Paul &lt;sean@poorly.run&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181212204309.GA150523@art_vandelay
</content>
</entry>
<entry>
<title>Merge tag 'drm-intel-fixes-2018-12-12-1' of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes</title>
<updated>2018-12-12T21:22:47Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T21:22:47Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=ce07fe9e1cec520d343e31f1bf61949fe1b4411e'/>
<id>urn:sha1:ce07fe9e1cec520d343e31f1bf61949fe1b4411e</id>
<content type='text'>
- Two fixes to avoid GPU hangs (on Braswell and Gen3)

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: Joonas Lahtinen &lt;joonas.lahtinen@linux.intel.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181212134010.GA18900@jlahtine-desk.ger.corp.intel.com
</content>
</entry>
<entry>
<title>Merge tag 'drm-intel-fixes-2018-12-07' of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes</title>
<updated>2018-12-12T21:21:29Z</updated>
<author>
<name>Dave Airlie</name>
<email>airlied@redhat.com</email>
</author>
<published>2018-12-12T21:21:29Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=71fb553974556e29ebf6fa3cf6bd73342e7dbc5d'/>
<id>urn:sha1:71fb553974556e29ebf6fa3cf6bd73342e7dbc5d</id>
<content type='text'>
- Fix for system crash after GPU hang (Bugzilla #107945)
- GVT fix for guest graphics corruption (https://github.com/intel/gvt-linux/issues/61)

Signed-off-by: Dave Airlie &lt;airlied@redhat.com&gt;
From: Joonas Lahtinen &lt;joonas.lahtinen@linux.intel.com&gt;
Link: https://patchwork.freedesktop.org/patch/msgid/20181207104352.GA18214@jlahtine-desk.ger.corp.intel.com
</content>
</entry>
<entry>
<title>drm/amdgpu: drop fclk/gfxclk ratio setting</title>
<updated>2018-12-12T19:52:29Z</updated>
<author>
<name>Evan Quan</name>
<email>evan.quan@amd.com</email>
</author>
<published>2018-12-12T06:56:14Z</published>
<link rel='alternate' type='text/html' href='https://git.shady.money/linux/commit/?id=676fff1a5512e7971aa9a235052d253df8f5284a'/>
<id>urn:sha1:676fff1a5512e7971aa9a235052d253df8f5284a</id>
<content type='text'>
Since this is not needed any more on the latest SMC firmware.

Signed-off-by: Evan Quan &lt;evan.quan@amd.com&gt;
Acked-by: Feifei Xu &lt;Feifei.Xu@amd.com&gt;
Signed-off-by: Alex Deucher &lt;alexander.deucher@amd.com&gt;
</content>
</entry>
</feed>
