Xi Wang 8a78389651 vmwgfx: fix incorrect VRAM size check in vmw_kms_fb_create() ... Commit e133e737 didn't correctly fix the integer overflow issue. - unsigned int required_size; + u64 required_size; ... required_size = mode_cmd->pitch * mode_cmd->height; - if (unlikely(required_size > dev_priv->vram_size)) { + if (unlikely(required_size > (u64) dev_priv->vram_size)) { Note that both pitch and height are u32. Their product is still u32 and would overflow before being assigned to required_size. A correct way is to convert pitch and height to u64 before the multiplication. required_size = (u64)mode_cmd->pitch * (u64)mode_cmd->height; This patch calls the existing vmw_kms_validate_mode_vram() for validation. Signed-off-by: Xi Wang <xi.wang@gmail.com> Reviewed-and-tested-by: Thomas Hellstrom <thellstrom@vmware.com> Signed-off-by: Dave Airlie <airlied@redhat.com>		2011-12-22 12:31:02 +00:00
..
accessibility
acpi
amba
ata
atm
auxdisplay
base	PM / Driver core: leave runtime PM enabled during system shutdown	2011-12-07 22:26:56 +01:00
bcma
block	Merge branch 'for-linus' of git://git.kernel.dk/linux-block	2011-12-16 10:05:14 -08:00
bluetooth	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem	2011-12-09 14:07:12 -05:00
cdrom
char	ipmi_watchdog: restore settings when BMC reset	2011-12-20 10:25:04 -08:00
clk
clocksource
connector
cpufreq
cpuidle
crypto
dca
devfreq
dio
dma
edac
eisa
firewire
firmware	Merge branch 'linux-next' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/ibft	2011-12-15 14:16:47 -08:00
gpio	gpio: Fix DA9052 GPIO build errors.	2011-12-15 11:25:43 -07:00
gpu	vmwgfx: fix incorrect VRAM size check in vmw_kms_fb_create()	2011-12-22 12:31:02 +00:00
hid	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid	2011-12-02 08:25:46 -08:00
hv
hwmon	hwmon: (jz4740) Staticise jz4740_hwmon_driver	2011-12-12 08:31:21 -08:00
hwspinlock
i2c	i2c-eg20t: correct the driver init order of pch_i2c_probe()	2011-12-18 11:46:42 +00:00
ide
idle
ieee802154
infiniband	Merge branches 'cma', 'mlx4' and 'qib' into for-next	2011-12-19 09:19:49 -08:00
input	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2011-12-19 15:11:12 -08:00
iommu	Merge branch 'drm-intel-fixes' of git://people.freedesktop.org/~keithp/linux	2011-12-16 11:27:56 -08:00
isdn	isdn: avoid copying too long drvid	2011-11-29 18:39:37 -05:00
leds
lguest
macintosh
mca
md	md: raid5 crash during degradation	2011-12-09 14:26:11 +11:00
media	Merge branch 'v4l_for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media	2011-12-20 10:49:39 -08:00
memstick
message
mfd
misc
mmc	mmc: vub300: fix type of firmware_rom_wait_states module parameter	2011-12-19 15:56:09 -08:00
mtd	mtd: plat_ram: call mtd_device_register only if partition data exists	2011-12-19 11:13:52 +00:00
net	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2011-12-16 12:17:32 -08:00
nfc
nubus
of	of/irq: Get rid of NO_IRQ usage	2011-12-07 09:06:37 -08:00
oprofile	oprofile: Fix uninitialized memory access when writing to writing to oprofilefs	2011-12-19 17:18:43 +01:00
parisc
parport
pci	pci: Fix hotplug of Express Module with pci bridges	2011-12-18 14:10:16 -08:00
pcmcia
pinctrl
platform	toshiba_acpi: Fix machines that don't support HCI_SYSTEM_EVENT	2011-12-05 13:07:28 -05:00
pnp
power	x86/mrst: Battery fixes	2011-12-05 17:06:37 +01:00
pps
ps3
ptp	ptp: Fix clock_getres() implementation	2011-12-06 11:38:32 +01:00
rapidio	rapidio/tsi721: modify PCIe capability settings	2011-12-09 07:50:29 -08:00
regulator
rtc	Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2011-12-20 11:42:38 -08:00
s390	[SCSI] zfcp: return early from slave_destroy if slave_alloc returned early	2011-12-14 15:40:43 +04:00
sbus	sbus: convert drivers/sbus/char/* to use module_platform_driver()	2011-12-04 10:46:58 -08:00
scsi	[SCSI] fcoe: fix fcoe in a DCB environment by adding DCB notifiers to set skb priority	2011-12-15 11:02:07 +04:00
sfi
sh
sn
spi	spi/gpio: fix section mismatch warning	2011-12-07 22:17:39 +01:00
ssb	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem	2011-12-09 14:07:12 -05:00
staging	staging: r8712u: Add new USB ID	2011-12-13 16:13:15 -08:00
target	iscsi-target: Fix hex2bin warn_unused compile message	2011-12-06 06:00:59 +00:00
tc
telephony
thermal
tty
uio
usb	USB: option: Removing one bogus and adding some new Huawei combinations	2011-12-13 09:46:01 -08:00
uwb
vhost
video
virt
virtio
vlynq
w1
watchdog
xen	Revert "xen/pv-on-hvm kexec: add xs_reset_watches to shutdown watches from old kernel"	2011-12-19 09:30:35 -05:00
zorro
Kconfig
Makefile