[PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

On 03/30/2012 01:09 PM, Marcus Lorentzon wrote: > On 03/30/2012 12:12 PM, Ville Syrj?l? wrote: >>> +#define DRM_FORMAT_NV12MT fourcc_code('T', 'M', '1', '2') /* 2x2 >>> subsampled Cr:Cb plane 64x32 macroblocks */ >> This one is more difficult. Until now tiling was always handled in >> driver

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 14:17:41 -0400, Xi Wang wrote: > On Apr 6, 2012, at 10:44 AM, Chris Wilson wrote: > > > That I agreed with, I just disagree with how you chose to handle it. > > Rather than continue on and attempt to vmalloc a large array we should > > just fail the ioctl with EINVAL. > > Why

[PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

can we still remove them from the kernel header? > > > > > > > Yes, right. these formats aren't used for any SoCs except Exynos series > yet > > but just we are first. I think they should be added because anyone may > use > > them someday at least possible. > > Since DRM_FORMAT_NV12M is _identical_ to DRM_FORMAT_NV12, I see no point > in adding it (similarly for YUV420M vs. YUV420). > > -- > Ville Syrj?l? > syrjala at sci.fi > http://www.sci.fi/~syrjala/ > ___ > dri-devel mailing list > dri-devel at lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/dri-devel > -- next part -- An HTML attachment was scrubbed... URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20120406/efd63853/attachment.htm>

[PATCH] drm/savage: fix integer overflows in savage_bci_cmdbuf()

Since cmdbuf->size and cmdbuf->nbox are from userspace, a large value would overflow the allocation size, leading to out-of-bounds access. Signed-off-by: Xi Wang --- drivers/gpu/drm/savage/savage_state.c |6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git

[PATCH 11/11] v4l: vb2: Add dma-contig allocator as dma_buf user

Hi Tomasz, On Thursday 05 April 2012 16:00:08 Tomasz Stanislawski wrote: > From: Sumit Semwal > > This patch makes changes for adding dma-contig as a dma_buf user. It > provides function implementations for the {attach, detach, map, > unmap}_dmabuf() mem_ops of DMABUF memory type. > >

[PATCH 08/11] v4l: vb2-dma-contig: add support for scatterlist in userptr mode

Hi Tomasz, On Thursday 05 April 2012 16:00:05 Tomasz Stanislawski wrote: > From: Andrzej Pietrasiewicz > > This patch introduces usage of dma_map_sg to map memory behind > a userspace pointer to a device as dma-contiguous mapping. > > Signed-off-by: Andrzej Pietrasiewicz > Signed-off-by:

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 3:40 PM, Chris Wilson wrote: > On Fri, 6 Apr 2012 14:17:41 -0400, Xi Wang wrote: >> >> Why an attempt to vmalloc? The overflow check in drm_malloc_ab() >> will simply return NULL and fail the ioctl with -ENOMEM. > > It's an invalid value for the ioctl and should be treated

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #5 from Ned Anderson 2012-04-06 09:09:54 PDT --- Also fyi, i noticed that the same thing occurs in a different game(BZFlag) when i turn on shadows... -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 10:01:36 -0400, Xi Wang wrote: > On Apr 6, 2012, at 9:54 AM, Chris Wilson wrote: > > > On Fri, 6 Apr 2012 09:46:46 -0400, Xi Wang wrote: > >> On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: > >> > >>> On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang wrote: > A large

[PATCH 09/11] v4l: vb2: add prepare/finish callbacks to allocators

Hi Tomasz, On Thursday 05 April 2012 16:00:06 Tomasz Stanislawski wrote: > From: Marek Szyprowski > > This patch adds support for prepare/finish callbacks in VB2 allocators. > These callback are used for buffer flushing. > > Signed-off-by: Marek Szyprowski > --- >

[PATCH 03/11] v4l: vb2: add support for shared buffer (dma_buf)

Hi Tomasz, On Thursday 05 April 2012 16:00:00 Tomasz Stanislawski wrote: > From: Sumit Semwal > > This patch adds support for DMABUF memory type in videobuf2. It calls > relevant APIs of dma_buf for v4l reqbuf / qbuf / dqbuf operations. > > For this version, the support is for videobuf2 as a

[PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

Hi Ville, > -Original Message- > From: Ville Syrj?l? [mailto:ville.syrjala at linux.intel.com] > Sent: Friday, April 06, 2012 3:14 AM > To: airlied at redhat.com > Cc: inki.dae at samsung.com; kyungmin.park at samsung.com; dri- > devel at lists.freedesktop.org; Seung-Woo Kim > Subject:

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 09:46:46 -0400, Xi Wang wrote: > On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: > > > On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang wrote: > >> A large args->buffer_count from userspace may overflow the allocation > >> size, leading to out-of-bounds access. > >> > >> Use

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #4 from Ned Anderson 2012-04-06 07:39:16 PDT --- Created attachment 59589 --> https://bugs.freedesktop.org/attachment.cgi?id=59589 glxinfo output -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email ---

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #3 from Ned Anderson 2012-04-06 07:38:37 PDT --- Created attachment 59588 --> https://bugs.freedesktop.org/attachment.cgi?id=59588 Dmesg -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email --- You are

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #2 from Ned Anderson 2012-04-06 07:38:02 PDT --- Created attachment 59587 --> https://bugs.freedesktop.org/attachment.cgi?id=59587 xorg log Xorg Log -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang wrote: > A large args->buffer_count from userspace may overflow the allocation > size, leading to out-of-bounds access. > > Use kmalloc_array() to avoid that. I can safely say that exec list larger than 4GiB is going to be an illegal operation and

[PATCH 02/11] Documentation: media: description of DMABUF importing in V4L2

Hi Tomasz, Thanks for the patch. On Thursday 05 April 2012 15:59:59 Tomasz Stanislawski wrote: > This patch adds description and usage examples for importing > DMABUF file descriptor in V4L2. [snip] > diff --git a/Documentation/DocBook/media/v4l/io.xml >

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 10:44 AM, Chris Wilson wrote: > That I agreed with, I just disagree with how you chose to handle it. > Rather than continue on and attempt to vmalloc a large array we should > just fail the ioctl with EINVAL. Why an attempt to vmalloc? The overflow check in drm_malloc_ab()

[PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

Hello, On 04/06/2012 11:22 AM, Kyungmin Park wrote: > + V4L2 develper > Sylwester, please give your opinions? How to handle it at v4l2 side. > > Thank you, > Kyungmin Park > > On Apr 6, 2012 12:44 AM, "Ville Syrj?l?" > wrote: > > On Fri, Apr 06, 2012 at

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 Alex Deucher changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

[Bug 46796] [X800SE] Mouse cursor corruption when switching users

https://bugs.freedesktop.org/show_bug.cgi?id=46796 Alex Deucher changed: What|Removed |Added CC||rankincj at googlemail.com --- Comment

[Bug 48382] New: weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 Bug #: 48382 Summary: weird rendering distortions on R200M Classification: Unclassified Product: DRI Version: unspecified Platform: x86-64 (AMD64) OS/Version: Linux (All)

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 --- Comment #9 from Chris Rankin 2012-04-06 05:10:05 PDT --- (In reply to comment #8) > If your card has more than 128M of VRAM... 256 MB, to be exact: radeon :01:00.0: putting AGP V3 device into 8x mode radeon :01:00.0: GTT: 256M

[Bug 48305] llpp gets segfault in r600g_dri.so

https://bugs.freedesktop.org/show_bug.cgi?id=48305 --- Comment #8 from Michel D?nzer 2012-04-06 04:11:52 PDT --- Smells more like a compiler bug then. Which version of gcc is this? Does it also happen with an older one? -- Configure bugmail:

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 --- Comment #8 from Michel D?nzer 2012-04-06 04:06:42 PDT --- If your card has more than 128M of VRAM (that's just one reason why Xorg.0.log and dmesg should be attached to every bug report...), let's mark this as a duplicate of bug 46796,

[Bug 48304] text in fbterm is garbled

https://bugs.freedesktop.org/show_bug.cgi?id=48304 Michel D?nzer changed: What|Removed |Added Status|NEW |RESOLVED Resolution|

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 --- Comment #7 from Chris Rankin 2012-04-06 03:55:36 PDT --- (In reply to comment #6) > Possibly a duplicate of bug 46796. Or vice versa? > Can you try the patch there or a 3.4 kernel snapshot? I believe that this patch has now been added to

[PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

On Fri, Apr 06, 2012 at 03:05:36PM +0900, Inki Dae wrote: > Hi Ville, > > > -Original Message- > > From: Ville Syrj?l? [mailto:ville.syrjala at linux.intel.com] > > Sent: Friday, April 06, 2012 3:14 AM > > To: airlied at redhat.com > > Cc: inki.dae at samsung.com; kyungmin.park at

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 9:54 AM, Chris Wilson wrote: > On Fri, 6 Apr 2012 09:46:46 -0400, Xi Wang wrote: >> On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: >> >>> On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang wrote: A large args->buffer_count from userspace may overflow the allocation size,

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: > On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang wrote: >> A large args->buffer_count from userspace may overflow the allocation >> size, leading to out-of-bounds access. >> >> Use kmalloc_array() to avoid that. > > I can safely say that exec list

[PATCH 2/2] drm/i915: fix integer overflow in i915_gem_do_execbuffer()

A large args->num_cliprects from userspace may overflow the allocation size, leading to out-of-bounds access. | i915_gem_do_execbuffer() | i915_gem_execbuffer() Use kmalloc_array() to avoid that. Signed-off-by: Xi Wang --- drivers/gpu/drm/i915/i915_gem_execbuffer.c |4 ++-- 1 files

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

A large args->buffer_count from userspace may overflow the allocation size, leading to out-of-bounds access. Use kmalloc_array() to avoid that. Signed-off-by: Xi Wang --- drivers/gpu/drm/i915/i915_gem_execbuffer.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 Alex Deucher changed: What|Removed |Added Product|DRI |Mesa Version|unspecified

[Bug 48305] llpp gets segfault in r600g_dri.so

https://bugs.freedesktop.org/show_bug.cgi?id=48305 --- Comment #7 from myxol 2012-04-05 17:49:05 PDT --- > Maybe you can try isolating which specific option implied by -O3 but not by > -O2 makes the difference. I tried. It is -ftree-vectorize -- Configure bugmail:

drm: Branch 'master' - 5 commits

On Tue, Apr 03, 2012 at 02:50:01PM -0700, Rob Clark wrote: > + /* just testing a limited # of formats to test single > + * and multi-planar path.. would be nice to add more.. > + */ > + if (!strcmp(p->format_str, "YUYV")) { > +

Re: [PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

+ V4L2 develper Sylwester, please give your opinions? How to handle it at v4l2 side. Thank you, Kyungmin Park On Apr 6, 2012 12:44 AM, Ville Syrjälä syrj...@sci.fi wrote: On Fri, Apr 06, 2012 at 03:05:36PM +0900, Inki Dae wrote: Hi Ville, -Original Message- From: Ville Syrjälä

Re: [PATCH 02/11] Documentation: media: description of DMABUF importing in V4L2

Le jeudi 5 avril 2012 16:59:59 Tomasz Stanislawski, vous avez écrit : This patch adds description and usage examples for importing DMABUF file descriptor in V4L2. Signed-off-by: Tomasz Stanislawski t.stanisl...@samsung.com Signed-off-by: Kyungmin Park kyungmin.p...@samsung.com ---

Re: [PATCH 03/11] v4l: vb2: add support for shared buffer (dma_buf)

Le jeudi 5 avril 2012 17:00:00 Tomasz Stanislawski, vous avez écrit : From: Sumit Semwal sumit.sem...@ti.com This patch adds support for DMABUF memory type in videobuf2. It calls relevant APIs of dma_buf for v4l reqbuf / qbuf / dqbuf operations. For this version, the support is for

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 --- Comment #7 from Chris Rankin ranki...@googlemail.com 2012-04-06 03:55:36 PDT --- (In reply to comment #6) Possibly a duplicate of bug 46796. Or vice versa? Can you try the patch there or a 3.4 kernel snapshot? I believe that this patch

[Bug 48304] text in fbterm is garbled

https://bugs.freedesktop.org/show_bug.cgi?id=48304 Michel Dänzer mic...@daenzer.net changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 --- Comment #8 from Michel Dänzer mic...@daenzer.net 2012-04-06 04:06:42 PDT --- If your card has more than 128M of VRAM (that's just one reason why Xorg.0.log and dmesg should be attached to every bug report...), let's mark this as a duplicate

[Bug 48305] llpp gets segfault in r600g_dri.so

https://bugs.freedesktop.org/show_bug.cgi?id=48305 --- Comment #8 from Michel Dänzer mic...@daenzer.net 2012-04-06 04:11:52 PDT --- Smells more like a compiler bug then. Which version of gcc is this? Does it also happen with an older one? -- Configure bugmail:

Re: [PATCH 02/11] Documentation: media: description of DMABUF importing in V4L2

Hi Tomasz, Thanks for the patch. On Thursday 05 April 2012 15:59:59 Tomasz Stanislawski wrote: This patch adds description and usage examples for importing DMABUF file descriptor in V4L2. [snip] diff --git a/Documentation/DocBook/media/v4l/io.xml b/Documentation/DocBook/media/v4l/io.xml

[Bug 48382] New: weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 Bug #: 48382 Summary: weird rendering distortions on R200M Classification: Unclassified Product: DRI Version: unspecified Platform: x86-64 (AMD64) OS/Version: Linux (All)

[PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

A large args-buffer_count from userspace may overflow the allocation size, leading to out-of-bounds access. Use kmalloc_array() to avoid that. Signed-off-by: Xi Wang xi.w...@gmail.com --- drivers/gpu/drm/i915/i915_gem_execbuffer.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)

[PATCH 2/2] drm/i915: fix integer overflow in i915_gem_do_execbuffer()

A large args-num_cliprects from userspace may overflow the allocation size, leading to out-of-bounds access. | i915_gem_do_execbuffer() | i915_gem_execbuffer() Use kmalloc_array() to avoid that. Signed-off-by: Xi Wang xi.w...@gmail.com --- drivers/gpu/drm/i915/i915_gem_execbuffer.c |4 ++--

[Bug 36769] Sporadic corruption of hardware cursor.

https://bugs.freedesktop.org/show_bug.cgi?id=36769 Alex Deucher ag...@yahoo.com changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 46796] [X800SE] Mouse cursor corruption when switching users

https://bugs.freedesktop.org/show_bug.cgi?id=46796 Alex Deucher ag...@yahoo.com changed: What|Removed |Added CC||ranki...@googlemail.com

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 Alex Deucher ag...@yahoo.com changed: What|Removed |Added Product|DRI |Mesa

Re: [PATCH 03/11] v4l: vb2: add support for shared buffer (dma_buf)

Hi Tomasz, On Thursday 05 April 2012 16:00:00 Tomasz Stanislawski wrote: From: Sumit Semwal sumit.sem...@ti.com This patch adds support for DMABUF memory type in videobuf2. It calls relevant APIs of dma_buf for v4l reqbuf / qbuf / dqbuf operations. For this version, the support is for

Re: [PATCH 09/11] v4l: vb2: add prepare/finish callbacks to allocators

Hi Tomasz, On Thursday 05 April 2012 16:00:06 Tomasz Stanislawski wrote: From: Marek Szyprowski m.szyprow...@samsung.com This patch adds support for prepare/finish callbacks in VB2 allocators. These callback are used for buffer flushing. Signed-off-by: Marek Szyprowski

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang xi.w...@gmail.com wrote: A large args-buffer_count from userspace may overflow the allocation size, leading to out-of-bounds access. Use kmalloc_array() to avoid that. I can safely say that exec list larger than 4GiB is going to be an illegal

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 09:46:46 -0400, Xi Wang xi.w...@gmail.com wrote: On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang xi.w...@gmail.com wrote: A large args-buffer_count from userspace may overflow the allocation size, leading to out-of-bounds

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #3 from Ned Anderson mds...@gmail.com 2012-04-06 07:38:37 PDT --- Created attachment 59588 -- https://bugs.freedesktop.org/attachment.cgi?id=59588 Dmesg -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #4 from Ned Anderson mds...@gmail.com 2012-04-06 07:39:16 PDT --- Created attachment 59589 -- https://bugs.freedesktop.org/attachment.cgi?id=59589 glxinfo output -- Configure bugmail:

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 10:01:36 -0400, Xi Wang xi.w...@gmail.com wrote: On Apr 6, 2012, at 9:54 AM, Chris Wilson wrote: On Fri, 6 Apr 2012 09:46:46 -0400, Xi Wang xi.w...@gmail.com wrote: On Apr 6, 2012, at 9:36 AM, Chris Wilson wrote: On Fri, 6 Apr 2012 08:58:18 -0400, Xi Wang

Re: [PATCH 08/11] v4l: vb2-dma-contig: add support for scatterlist in userptr mode

Hi Tomasz, On Thursday 05 April 2012 16:00:05 Tomasz Stanislawski wrote: From: Andrzej Pietrasiewicz andrze...@samsung.com This patch introduces usage of dma_map_sg to map memory behind a userspace pointer to a device as dma-contiguous mapping. Signed-off-by: Andrzej Pietrasiewicz

Re: [PATCH 11/11] v4l: vb2: Add dma-contig allocator as dma_buf user

Hi Tomasz, On Thursday 05 April 2012 16:00:08 Tomasz Stanislawski wrote: From: Sumit Semwal sumit.sem...@ti.com This patch makes changes for adding dma-contig as a dma_buf user. It provides function implementations for the {attach, detach, map, unmap}_dmabuf() mem_ops of DMABUF memory type.

Re: [PATCH libdrm] libdrm: update drm/drm_fourcc.h from kernel to add multi plane formats

Hello, On 04/06/2012 11:22 AM, Kyungmin Park wrote: + V4L2 develper Sylwester, please give your opinions? How to handle it at v4l2 side. Thank you, Kyungmin Park On Apr 6, 2012 12:44 AM, Ville Syrjälä syrj...@sci.fi mailto:syrj...@sci.fi wrote: On Fri, Apr 06, 2012 at 03:05:36PM

[Bug 48382] weird rendering distortions on R200M

https://bugs.freedesktop.org/show_bug.cgi?id=48382 --- Comment #5 from Ned Anderson mds...@gmail.com 2012-04-06 09:09:54 PDT --- Also fyi, i noticed that the same thing occurs in a different game(BZFlag) when i turn on shadows... -- Configure bugmail:

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 10:44 AM, Chris Wilson wrote: That I agreed with, I just disagree with how you chose to handle it. Rather than continue on and attempt to vmalloc a large array we should just fail the ioctl with EINVAL. Why an attempt to vmalloc? The overflow check in drm_malloc_ab() will

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Fri, 6 Apr 2012 14:17:41 -0400, Xi Wang xi.w...@gmail.com wrote: On Apr 6, 2012, at 10:44 AM, Chris Wilson wrote: That I agreed with, I just disagree with how you chose to handle it. Rather than continue on and attempt to vmalloc a large array we should just fail the ioctl with EINVAL.

Re: [PATCH 1/2] drm/i915: fix integer overflow in i915_gem_execbuffer2()

On Apr 6, 2012, at 3:40 PM, Chris Wilson wrote: On Fri, 6 Apr 2012 14:17:41 -0400, Xi Wang xi.w...@gmail.com wrote: Why an attempt to vmalloc? The overflow check in drm_malloc_ab() will simply return NULL and fail the ioctl with -ENOMEM. It's an invalid value for the ioctl and should be

Re: i915_driver_irq_handler: irq 42: nobody cared [generic IRQ handling broken?]

On 03/30/2012 02:24 PM, Chris Wilson wrote: On Fri, 30 Mar 2012 14:11:47 +0200, Jiri Slaby jsl...@suse.cz wrote: On 03/30/2012 12:45 PM, Chris Wilson wrote: On Fri, 30 Mar 2012 11:59:28 +0200, Jiri Slaby jsl...@suse.cz wrote: I don't know what to dump more, because iir is obviously zero too.

[PATCH] drm/savage: fix integer overflows in savage_bci_cmdbuf()

Since cmdbuf-size and cmdbuf-nbox are from userspace, a large value would overflow the allocation size, leading to out-of-bounds access. Signed-off-by: Xi Wang xi.w...@gmail.com --- drivers/gpu/drm/savage/savage_state.c |6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) diff --git

[Bug 27314] displayport link training fails on certain panels (channel equalization fails)

https://bugs.freedesktop.org/show_bug.cgi?id=27314 --- Comment #67 from Rafael Ávila de Espíndola rafael.espind...@gmail.com 2012-04-06 17:22:46 PDT --- Created attachment 59612 -- https://bugs.freedesktop.org/attachment.cgi?id=59612 dmesg with bios booting and kernel 3.3.0 Results are