Michal Srb 3aec7f871c drm/i915/cmdparser: Do not check past the cmd length. ... The command MEDIA_VFE_STATE checks bits at offset +2 dwords. However, it is possible to have MEDIA_VFE_STATE command with length = 0 + LENGTH_BIAS = 2. In that case check_cmd will read bits from the following command, or even past the end of the buffer. If the offset ends up outside of the command length, reject the command. Fixes: 351e3db2b3 ("drm/i915: Implement command buffer parsing logic") Signed-off-by: Michal Srb <msrb@suse.com> Link: https://patchwork.freedesktop.org/patch/msgid/20180205151745.29292-1-msrb@suse.com Reviewed-by: Chris Wilson <chris@chris-wilson.co.uk> Signed-off-by: Chris Wilson <chris@chris-wilson.co.uk> Link: https://patchwork.freedesktop.org/patch/msgid/20180205160438.3267-2-chris@chris-wilson.co.uk		2018-02-05 20:49:24 +00:00
..
accessibility
acpi
amba
android
ata
atm
auxdisplay
base	Linux 4.15-rc8	2018-01-18 09:32:15 +10:00
bcma
block	Two rbd fixes for 4.12 and 4.2 issues respectively, marked for stable.	2018-01-11 16:57:32 -08:00
bluetooth
bus
cdrom
char
clk
clocksource
connector
cpufreq
cpuidle
crypto
dax
dca
devfreq
dio
dma
dma-buf
edac
eisa
extcon
firewire
firmware
fmc
fpga
fsi
gpio
gpu	drm/i915/cmdparser: Do not check past the cmd length.	2018-02-05 20:49:24 +00:00
hid
hsi
hv
hwmon
hwspinlock
hwtracing
i2c
ide
idle
iio
infiniband
input
iommu
ipack
irqchip
isdn
leds
lightnvm
macintosh
mailbox
mcb
md
media
memory
memstick
message
mfd
misc
mmc
mtd
mux
net	mlxsw: spectrum_qdisc: Don't use variable array in mlxsw_sp_tclass_congestion_enable	2018-01-10 15:58:23 -05:00
nfc
ntb
nubus
nvdimm
nvme
nvmem
of	of_mdio: avoid MDIO bus removal when a PHY is missing	2018-01-10 15:07:47 -05:00
opp
oprofile
parisc
parport
pci
pcmcia
perf
phy
pinctrl
platform
pnp
power
powercap
pps
ps3
ptp
pwm
rapidio
ras
regulator
remoteproc
reset
rpmsg
rtc
s390
sbus
scsi
sfi
sh
sn
soc
spi
spmi
ssb
staging	Linux 4.15-rc8	2018-01-18 09:32:15 +10:00
target
tc
tee
thermal
thunderbolt
tty
uio
usb	usb: misc: usb3503: make sure reset is low for at least 100us	2018-01-11 18:39:52 +01:00
uwb
vfio
vhost
video
virt
virtio
vlynq
vme
w1
watchdog
xen	xen: fixes for 4.15-rc8	2018-01-12 10:00:15 -08:00
zorro
Kconfig
Makefile