1. 11 10月, 2016 2 次提交
  2. 15 12月, 2015 2 次提交
  3. 02 11月, 2015 1 次提交
  4. 13 10月, 2015 1 次提交
  5. 14 9月, 2015 1 次提交
    • T
      drm/vmwgfx: Fix up user_dmabuf refcounting · 54c12bc3
      Thomas Hellstrom 提交于
      If user space calls unreference on a user_dmabuf it will typically
      kill the struct ttm_base_object member which is responsible for the
      user-space visibility. However the dmabuf part may still be alive and
      refcounted. In some situations, like for shared guest-backed surface
      referencing/opening, the driver may try to reference the
      struct ttm_base_object member again, causing an immediate kernel warning
      and a later kernel NULL pointer dereference.
      
      Fix this by always maintaining a reference on the struct
      ttm_base_object member, in situations where it might subsequently be
      referenced.
      
      Cc: <stable@vger.kernel.org>
      Signed-off-by: NThomas Hellstrom <thellstrom@vmware.com>
      Reviewed-by: NBrian Paul <brianp@vmware.com>
      Reviewed-by: NSinclair Yeh <syeh@vmware.com>
      54c12bc3
  6. 01 9月, 2015 1 次提交
  7. 13 8月, 2015 4 次提交
  8. 05 8月, 2015 4 次提交
  9. 28 3月, 2014 3 次提交
  10. 13 3月, 2014 1 次提交
  11. 05 2月, 2014 2 次提交
  12. 21 1月, 2014 1 次提交
  13. 17 1月, 2014 4 次提交
  14. 08 1月, 2014 1 次提交
    • T
      drm/ttm: ttm object security fixes for render nodes · 05efb1ab
      Thomas Hellstrom 提交于
      When a client looks up a ttm object, don't look it up through the device hash
      table, but rather from the file hash table. That makes sure that the client
      has indeed put a reference on the object, or in gem terms, has opened
      the object; either using prime or using the global "name".
      
      To avoid a performance loss, make sure the file hash table entries can be
      looked up from under an RCU lock, and as a consequence, replace the rwlock
      with a spinlock, since we never need to take it in read mode only anymore.
      
      Finally add a ttm object lookup function for the device hash table, that is
      intended to be used when we put a ref object on a base object or, in  gem terms,
      when we open the object.
      Signed-off-by: NThomas Hellstrom <thellstrom@vmware.com>
      Reviewed-by: NBrian Paul <brianp@vmware.com>
      05efb1ab
  15. 18 11月, 2013 1 次提交
  16. 21 11月, 2012 2 次提交