]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commitdiff
3.18-stable patches
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 11 Jun 2018 05:26:13 +0000 (07:26 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 11 Jun 2018 05:26:13 +0000 (07:26 +0200)
added patches:
drm-set-fmode_unsigned_offset-for-drm-files.patch

queue-3.18/drm-set-fmode_unsigned_offset-for-drm-files.patch [new file with mode: 0644]
queue-3.18/series

diff --git a/queue-3.18/drm-set-fmode_unsigned_offset-for-drm-files.patch b/queue-3.18/drm-set-fmode_unsigned_offset-for-drm-files.patch
new file mode 100644 (file)
index 0000000..3ad8e78
--- /dev/null
@@ -0,0 +1,36 @@
+From 76ef6b28ea4f81c3d511866a9b31392caa833126 Mon Sep 17 00:00:00 2001
+From: Dave Airlie <airlied@redhat.com>
+Date: Tue, 15 May 2018 13:38:15 +1000
+Subject: drm: set FMODE_UNSIGNED_OFFSET for drm files
+
+From: Dave Airlie <airlied@redhat.com>
+
+commit 76ef6b28ea4f81c3d511866a9b31392caa833126 upstream.
+
+Since we have the ttm and gem vma managers using a subset
+of the file address space for objects, and these start at
+0x100000000 they will overflow the new mmap checks.
+
+I've checked all the mmap routines I could see for any
+bad behaviour but overall most people use GEM/TTM VMA
+managers even the legacy drivers have a hashtable.
+
+Reported-and-Tested-by: Arthur Marsh (amarsh04 on #radeon)
+Fixes: be83bbf8068 (mmap: introduce sane default mmap limits)
+Signed-off-by: Dave Airlie <airlied@redhat.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+
+---
+ drivers/gpu/drm/drm_fops.c |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/drivers/gpu/drm/drm_fops.c
++++ b/drivers/gpu/drm/drm_fops.c
+@@ -155,6 +155,7 @@ static int drm_open_helper(struct file *
+               return -ENOMEM;
+       filp->private_data = priv;
++      filp->f_mode |= FMODE_UNSIGNED_OFFSET;
+       priv->filp = filp;
+       priv->uid = current_euid();
+       priv->pid = get_pid(task_pid(current));
index 52de08f87718ecff30bb5f4521ff6afd8cbf476d..7232d6ede8926820e8668ae7c4d75e4d2f416b0e 100644 (file)
@@ -8,3 +8,4 @@ fix-io_destroy-aio_complete-race.patch
 mm-fix-the-null-mapping-case-in-__isolate_lru_page.patch
 mmap-introduce-sane-default-mmap-limits.patch
 mmap-relax-file-size-limit-for-regular-files.patch
+drm-set-fmode_unsigned_offset-for-drm-files.patch