OSDN Git Service

drm/vmwgfx: fix memory corruption with legacy/sou connectors
authorRob Clark <rclark@redhat.com>
Wed, 17 Jan 2018 15:16:20 +0000 (10:16 -0500)
committerThomas Hellstrom <thellstrom@vmware.com>
Wed, 17 Jan 2018 15:27:45 +0000 (16:27 +0100)
commit8a510a5c75261ba0ec39155326982aa786541e29
tree96aa941a448dde50e732eb687cf39ecab6aee20c
parent2b0bc68cccc70f1a61b90b49012e917eea4cb251
drm/vmwgfx: fix memory corruption with legacy/sou connectors

It looks like in all cases 'struct vmw_connector_state' is used.  But
only in stdu connectors, was atomic_{duplicate,destroy}_state() properly
subclassed.  Leading to writes beyond the end of the allocated connector
state block and all sorts of fun memory corruption related crashes.

Fixes: d7721ca71126 "drm/vmwgfx: Connector atomic state"
Cc: <stable@vger.kernel.org>
Signed-off-by: Rob Clark <rclark@redhat.com>
Reviewed-by: Thomas Hellstrom <thellstrom@vmware.com>
drivers/gpu/drm/vmwgfx/vmwgfx_ldu.c
drivers/gpu/drm/vmwgfx/vmwgfx_scrn.c