linux/drivers/gpu/drm/virtio
Doug Horn e219688fc5 Fix use after free in get_capset_info callback.
If a response to virtio_gpu_cmd_get_capset_info takes longer than
five seconds to return, the callback will access freed kernel memory
in vg->capsets.

Signed-off-by: Doug Horn <doughorn@google.com>
Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2020-09-09 08:54:14 +02:00
..
Kconfig drm: virtio: fix kconfig dependency warning 2020-08-31 08:55:02 +02:00
Makefile drm/virtio: switch from ttm to gem shmem helpers 2019-09-04 06:54:11 +02:00
virtgpu_debugfs.c drm: convert .debugfs_init() hook to return void. 2020-03-18 17:53:28 +01:00
virtgpu_display.c drm/virtio: drop virtio_gpu_output->enabled 2020-09-02 08:09:57 +02:00
virtgpu_drv.c drm/virtio: Support virtgpu exported resources 2020-08-18 10:01:54 +02:00
virtgpu_drv.h drm/virtio: drop virtio_gpu_output->enabled 2020-09-02 08:09:57 +02:00
virtgpu_fence.c drm/virtio: move to_virtio_fence inside virtgpu_fence 2019-12-19 07:13:46 +01:00
virtgpu_gem.c drm/virtio: Use struct_size() helper in kmalloc() 2020-08-17 13:08:43 +02:00
virtgpu_ioctl.c drm-misc-next for v5.9: 2020-06-24 15:45:51 +10:00
virtgpu_kms.c Fix use after free in get_capset_info callback. 2020-09-09 08:54:14 +02:00
virtgpu_object.c Linux 5.9-rc1 2020-08-18 14:14:25 +02:00
virtgpu_plane.c drm/virtio: drop virtio_gpu_output->enabled 2020-09-02 08:09:57 +02:00
virtgpu_prime.c drm/virtio: Support virtgpu exported resources 2020-08-18 10:01:54 +02:00
virtgpu_trace_points.c drm/virtio: add trace events for commands 2019-05-06 10:52:58 +02:00
virtgpu_trace.h drm/virtio: add trace events for commands 2019-05-06 10:52:58 +02:00
virtgpu_vq.c Fix use after free in get_capset_info callback. 2020-09-09 08:54:14 +02:00