Doug Horn f3c23dcff8 Fix use after free in get_capset_info callback. ... [ Upstream commit e219688fc5 ] If a response to virtio_gpu_cmd_get_capset_info takes longer than five seconds to return, the callback will access freed kernel memory in vg->capsets. Signed-off-by: Doug Horn <doughorn@google.com> Link: http://patchwork.freedesktop.org/patch/msgid/20200902210847.2689-2-gurchetansingh@chromium.org Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-10-29 09:58:07 +01:00
..
Kconfig	treewide: Add SPDX license identifier - Makefile/Kconfig	2019-05-21 10:50:46 +02:00
Makefile	drm/virtio: drop framebuffer dirty tracking code	2019-06-13 08:47:15 +02:00
virtgpu_debugfs.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_display.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_drv.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_drv.h	drm/ttm: use gem vma_node	2019-08-06 08:21:54 +02:00
virtgpu_fence.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_gem.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_ioctl.c	Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper."	2020-01-17 19:48:51 +01:00
virtgpu_kms.c	Fix use after free in get_capset_info callback.	2020-10-29 09:58:07 +01:00
virtgpu_object.c	drm/virtio: module_param_named() requires linux/moduleparam.h	2020-03-12 13:00:32 +01:00
virtgpu_plane.c	dma-buf: rename reservation_object to dma_resv	2019-08-13 09:09:30 +02:00
virtgpu_prime.c	drm/ttm: use gem vma_node	2019-08-06 08:21:54 +02:00
virtgpu_trace.h	drm/virtio: add trace events for commands	2019-05-06 10:52:58 +02:00
virtgpu_trace_points.c	drm/virtio: add trace events for commands	2019-05-06 10:52:58 +02:00
virtgpu_ttm.c	drm/virtgpu: drop use of drmP.h	2019-07-15 18:11:31 +02:00
virtgpu_vq.c	Fix use after free in get_capset_info callback.	2020-10-29 09:58:07 +01:00