This is a note to let you know that I've just added the patch titled
drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
to the 2.6.37-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
drm-fix-unsigned-vs-signed-comparison-issue-in-modeset-ctl-ioctl.patch
and it can be found in the queue-2.6.37 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <[email protected]> know about it.
>From 1922756124ddd53846877416d92ba4a802bc658f Mon Sep 17 00:00:00 2001
From: Dave Airlie <[email protected]>
Date: Thu, 24 Feb 2011 08:35:06 +1000
Subject: drm: fix unsigned vs signed comparison issue in modeset ctl ioctl.
From: Dave Airlie <[email protected]>
commit 1922756124ddd53846877416d92ba4a802bc658f upstream.
This fixes CVE-2011-1013.
Reported-by: Matthiew Herrb (OpenBSD X.org team)
Signed-off-by: Dave Airlie <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
---
drivers/gpu/drm/drm_irq.c | 3 ++-
include/drm/drmP.h | 2 +-
2 files changed, 3 insertions(+), 2 deletions(-)
--- a/drivers/gpu/drm/drm_irq.c
+++ b/drivers/gpu/drm/drm_irq.c
@@ -549,7 +549,8 @@ int drm_modeset_ctl(struct drm_device *d
struct drm_file *file_priv)
{
struct drm_modeset_ctl *modeset = data;
- int crtc, ret = 0;
+ int ret = 0;
+ unsigned int crtc;
/* If drm_vblank_init() hasn't been called yet, just no-op */
if (!dev->num_crtcs)
--- a/include/drm/drmP.h
+++ b/include/drm/drmP.h
@@ -1022,7 +1022,7 @@ struct drm_device {
struct platform_device *platformdev; /**< Platform device struture */
struct drm_sg_mem *sg; /**< Scatter gather memory */
- int num_crtcs; /**< Number of CRTCs on this device */
+ unsigned int num_crtcs; /**< Number of CRTCs on this
device */
void *dev_private; /**< device private data */
void *mm_private;
struct address_space *dev_mapping;
Patches currently in stable-queue which might be from [email protected] are
queue-2.6.37/drm-fix-unsigned-vs-signed-comparison-issue-in-modeset-ctl-ioctl.patch
queue-2.6.37/revert-drm-radeon-kms-switch-back-to-min-max-pll-post-divider-iteration.patch
_______________________________________________
stable mailing list
[email protected]
http://linux.kernel.org/mailman/listinfo/stable
