BMC/Intel-BMC/linux.git/drivers/gpu/drm/msm/msm_gem.c, branch dev-4.7

drm/msm: protect against faults from copy_from_user() in submit ioctl

2016-09-24T08:09:23+00:00

commit d78d383ab354b0b9e1d23404ae0d9fbdeb9aa035 upstream. An evil userspace could try to cause deadlock by passing an unfaulted-in GEM bo as submit->bos (or submit->cmds) table. Which will trigger msm_gem_fault() while we already hold struct_mutex. See: https://github.com/freedreno/msmtest/blob/master/evilsubmittest.c Signed-off-by: Rob Clark Signed-off-by: Greg Kroah-Hartman

drm/msm: deal with exhausted vmap space better

2016-06-04T18:45:48+00:00

Some, but not all, callers of obj->vmap() would check if return IS_ERR(). So let's actually return an error if vmap() fails. And fixup the call-sites that were not handling this properly. Signed-off-by: Rob Clark

drm: Remove unused drm_device from drm_gem_object_lookup()

2016-05-17T06:47:30+00:00

drm_gem_object_lookup() has never required the drm_device for its file local translation of the user handle to the GEM object. Let's remove the unused parameter and save some space. Signed-off-by: Chris Wilson Cc: dri-devel@lists.freedesktop.org Cc: Dave Airlie Cc: Daniel Vetter [danvet: Fixup kerneldoc too.] Signed-off-by: Daniel Vetter

drm/msm: 'struct fence' conversion

2016-05-08T14:22:15+00:00

Signed-off-by: Rob Clark

drm/msm: remove fence_cbs

2016-05-08T14:22:14+00:00

This was only used for atomic commit these days. So instead just give atomic it's own work-queue where we can do a block on each bo in turn. Simplifies things a whole bunch and makes the 'struct fence' conversion easier. Signed-off-by: Rob Clark

drm/msm: introduce msm_fence_context

2016-05-08T14:19:51+00:00

Better encapsulate the per-timeline stuff into fence-context. For now there is just a single fence-context, but eventually we'll also have one per-CRTC to enable fully explicit fencing. Signed-off-by: Rob Clark

drm/msm: use imported dmabuf's reservation object

2016-05-08T14:16:02+00:00

This was always the intention, but somehow it was never wired up properly. Signed-off-by: Rob Clark

drm/msm: move fence code to it's own file

2016-05-08T14:16:02+00:00

Signed-off-by: Rob Clark

mm, dax, gpu: convert vm_insert_mixed to pfn_t

2016-01-16T01:56:32+00:00

Convert the raw unsigned long 'pfn' argument to pfn_t for the purpose of evaluating the PFN_MAP and PFN_DEV flags. When both are set it triggers _PAGE_DEVMAP to be set in the resulting pte. There are no functional changes to the gpu drivers as a result of this conversion. Signed-off-by: Dan Williams Cc: Dave Hansen Cc: David Airlie Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

drm/msm: change to uninterruptible wait in atomic commit

2015-07-29T20:38:24+00:00

The atomic commit cannot easily undo and return an error once the state is swapped. Change to uninterruptible wait, and ignore the timeout error. Signed-off-by: Wentao Xu Signed-off-by: Rob Clark