linux/drivers/gpu
Murray McAllister 5ed7f4b5ec drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
If SVGA_3D_CMD_DX_SET_SHADER is called with a shader ID
of SVGA3D_INVALID_ID, and a shader type of
SVGA3D_SHADERTYPE_INVALID, the calculated binding.shader_slot
will be 4294967295, leading to an out-of-bounds read in vmw_binding_loc()
when the offset is calculated.

Cc: <stable@vger.kernel.org>
Fixes: d80efd5cb3 ("drm/vmwgfx: Initial DX support")
Signed-off-by: Murray McAllister <murray.mcallister@gmail.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
Signed-off-by: Thomas Hellstrom <thellstrom@vmware.com>
2019-05-21 10:23:10 +02:00
..
drm drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read 2019-05-21 10:23:10 +02:00
host1x gpu: host1x: Program stream ID to bypass without SMMU 2019-04-11 17:40:35 +02:00
ipu-v3 gpu: ipu-v3: dp: fix CSC handling 2019-04-23 14:54:16 +02:00
vga - qxl: Remove the conflicting framebuffers earlier 2019-03-14 11:37:46 +10:00
Makefile