From: Greg Kroah-Hartman Date: Mon, 11 Jun 2018 05:26:42 +0000 (+0200) Subject: 4.16-stable patches X-Git-Tag: v4.17.1~3 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7309a0bbd96ad27214dd9d8a913b722e6e054e54;p=thirdparty%2Fkernel%2Fstable-queue.git 4.16-stable patches added patches: drm-set-fmode_unsigned_offset-for-drm-files.patch --- diff --git a/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch b/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch new file mode 100644 index 00000000000..d8a2d0cd0e0 --- /dev/null +++ b/queue-4.16/drm-set-fmode_unsigned_offset-for-drm-files.patch @@ -0,0 +1,36 @@ +From 76ef6b28ea4f81c3d511866a9b31392caa833126 Mon Sep 17 00:00:00 2001 +From: Dave Airlie +Date: Tue, 15 May 2018 13:38:15 +1000 +Subject: drm: set FMODE_UNSIGNED_OFFSET for drm files + +From: Dave Airlie + +commit 76ef6b28ea4f81c3d511866a9b31392caa833126 upstream. + +Since we have the ttm and gem vma managers using a subset +of the file address space for objects, and these start at +0x100000000 they will overflow the new mmap checks. + +I've checked all the mmap routines I could see for any +bad behaviour but overall most people use GEM/TTM VMA +managers even the legacy drivers have a hashtable. + +Reported-and-Tested-by: Arthur Marsh (amarsh04 on #radeon) +Fixes: be83bbf8068 (mmap: introduce sane default mmap limits) +Signed-off-by: Dave Airlie +Signed-off-by: Greg Kroah-Hartman + +--- + drivers/gpu/drm/drm_file.c | 1 + + 1 file changed, 1 insertion(+) + +--- a/drivers/gpu/drm/drm_file.c ++++ b/drivers/gpu/drm/drm_file.c +@@ -212,6 +212,7 @@ static int drm_open_helper(struct file * + return -ENOMEM; + + filp->private_data = priv; ++ filp->f_mode |= FMODE_UNSIGNED_OFFSET; + priv->filp = filp; + priv->pid = get_pid(task_pid(current)); + priv->minor = minor; diff --git a/queue-4.16/series b/queue-4.16/series index 870c5f1ed9e..6ae0dacf855 100644 --- a/queue-4.16/series +++ b/queue-4.16/series @@ -46,3 +46,4 @@ ip_tunnel-restore-binding-to-ifaces-with-a-large-mtu.patch net-netsec-reduce-dma-mask-to-40-bits.patch vhost_net-flush-batched-heads-before-trying-to-busy-polling.patch pci-hv-do-not-wait-forever-on-a-device-that-has-disappeared.patch +drm-set-fmode_unsigned_offset-for-drm-files.patch