Patch "drm/etnaviv: Fix off-by-one error in reloc checking" has been added to the 4.9-stable tree
Subsystems (3)
This is a note to let you know that I've just added the patch titled
drm/etnaviv: Fix off-by-one error in reloc checking
to the 4.9-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
drm-etnaviv-fix-off-by-one-error-in-reloc-checking.patch
and it can be found in the queue-4.9 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree, please let <[email protected]> know about it.
Quoted 1 line
From
d6f756e09f01ea7a0efbbcef269a1e384a35d824Mon Sep 17 00:00:00 2001
From: "Wladimir J. van der Laan" <[email protected]>
Date: Tue, 25 Jul 2017 14:33:36 +0200
Subject: drm/etnaviv: Fix off-by-one error in reloc checking
From: Wladimir J. van der Laan <[email protected]>
commit d6f756e09f01ea7a0efbbcef269a1e384a35d824 upstream.
A relocation pointing to the last four bytes of a buffer can legitimately happen in the case of small vertex buffers.
--- drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c +2 -2
@@ -264,8 +264,8 @@ static int submit_reloc(struct etnaviv_gif (ret)return ret; -if (r->reloc_offset >= bo->obj->base.size -sizeof (*ptr)) { -DRM_ERROR ("relocation %u outside object" , i); +if (r->reloc_offset > bo->obj->base.size -sizeof (*ptr)) { +DRM_ERROR ("relocation %u outside object\n" , i);return -EINVAL ; }
Patches currently in stable-queue which might be from [email protected] are
queue-4.9/drm-etnaviv-fix-off-by-one-error-in-reloc-checking.patch