4.16-stable patches

added patches:
	drm-set-fmode_unsigned_offset-for-drm-files.patch

diff --git a/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch b/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch
new file mode 100644 (file)
index 0000000..d8a2d0c
--- /dev/null
+++ b/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch
@@ -0,0 +1,36 @@
+From 76ef6b28ea4f81c3d511866a9b31392caa833126 Mon Sep 17 00:00:00 2001
+From: Dave Airlie <airlied@redhat.com>
+Date: Tue, 15 May 2018 13:38:15 +1000
+Subject: drm: set FMODE_UNSIGNED_OFFSET for drm files
+
+From: Dave Airlie <airlied@redhat.com>
+
+commit 76ef6b28ea4f81c3d511866a9b31392caa833126 upstream.
+
+Since we have the ttm and gem vma managers using a subset
+of the file address space for objects, and these start at
+0x100000000 they will overflow the new mmap checks.
+
+I've checked all the mmap routines I could see for any
+bad behaviour but overall most people use GEM/TTM VMA
+managers even the legacy drivers have a hashtable.
+
+Reported-and-Tested-by: Arthur Marsh (amarsh04 on #radeon)
+Fixes: be83bbf8068 (mmap: introduce sane default mmap limits)
+Signed-off-by: Dave Airlie <airlied@redhat.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+---
+ drivers/gpu/drm/drm_file.c |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/drivers/gpu/drm/drm_file.c
++++ b/drivers/gpu/drm/drm_file.c
+@@ -212,6 +212,7 @@ static int drm_open_helper(struct file *
+               return -ENOMEM;
+ 
+       filp->private_data = priv;
++      filp->f_mode |= FMODE_UNSIGNED_OFFSET;
+       priv->filp = filp;
+       priv->pid = get_pid(task_pid(current));
+       priv->minor = minor;

diff --git a/queue-4.16/series b/queue-4.16/series
index 870c5f1ed9edf6dd81417ed7245a724b83f1459d..6ae0dacf855fa651ce843c98456809cc4f23f0fe 100644 (file)
--- a/queue-4.16/series
+++ b/queue-4.16/series
@@ -46,3 +46,4 @@ ip_tunnel-restore-binding-to-ifaces-with-a-large-mtu.patch
 net-netsec-reduce-dma-mask-to-40-bits.patch
 vhost_net-flush-batched-heads-before-trying-to-busy-polling.patch
 pci-hv-do-not-wait-forever-on-a-device-that-has-disappeared.patch
+drm-set-fmode_unsigned_offset-for-drm-files.patch