diff options
author | Benjamin Herrenschmidt <benh@kernel.crashing.org> | 2009-05-29 07:54:52 +0400 |
---|---|---|
committer | Benjamin Herrenschmidt <benh@kernel.crashing.org> | 2009-05-29 07:54:52 +0400 |
commit | 435462c6e639065460e91903d6bd2af0f5762fde (patch) | |
tree | bf66ccdd613019035ebab535762366aa1026399b /drivers/gpu/drm/drm_bufs.c | |
parent | d7b41b1fdf162d3e26cb73bf2cf14816918e371e (diff) | |
parent | b5c42bc8db17db80917f99205a03c51f17354495 (diff) | |
download | linux-435462c6e639065460e91903d6bd2af0f5762fde.tar.xz |
Merge branch 'merge' into next
Diffstat (limited to 'drivers/gpu/drm/drm_bufs.c')
-rw-r--r-- | drivers/gpu/drm/drm_bufs.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/drivers/gpu/drm/drm_bufs.c b/drivers/gpu/drm/drm_bufs.c index 6d80d17f1e96..0411d912d82a 100644 --- a/drivers/gpu/drm/drm_bufs.c +++ b/drivers/gpu/drm/drm_bufs.c @@ -170,6 +170,14 @@ static int drm_addmap_core(struct drm_device * dev, resource_size_t offset, } DRM_DEBUG("offset = 0x%08llx, size = 0x%08lx, type = %d\n", (unsigned long long)map->offset, map->size, map->type); + + /* page-align _DRM_SHM maps. They are allocated here so there is no security + * hole created by that and it works around various broken drivers that use + * a non-aligned quantity to map the SAREA. --BenH + */ + if (map->type == _DRM_SHM) + map->size = PAGE_ALIGN(map->size); + if ((map->offset & (~(resource_size_t)PAGE_MASK)) || (map->size & (~PAGE_MASK))) { drm_free(map, sizeof(*map), DRM_MEM_MAPS); return -EINVAL; |