linux/drivers/gpu/host1x
Arto Merilainen 3364cd2890 gpu: host1x: Copy gathers before verification
The firewall verified gather buffers before copying them. This
allowed a malicious application to rewrite the buffer content by
timing the rewrite carefully.

This patch makes the buffer validation occur after copying the
buffers.

Signed-off-by: Arto Merilainen <amerilainen@nvidia.com>
Signed-off-by: Terje Bergstrom <tbergstrom@nvidia.com>
Signed-off-by: Thierry Reding <thierry.reding@gmail.com>
2013-06-22 12:43:53 +02:00
..
drm drm/tegra: Remove DRIVER_BUS_PLATFORM from driver_features 2013-06-22 12:43:51 +02:00
hw gpu: host1x: Add debug support 2013-04-22 12:32:46 +02:00
cdma.c gpu: host1x: Add debug support 2013-04-22 12:32:46 +02:00
cdma.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
channel.c gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
channel.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
debug.c gpu: host1x: Add debug support 2013-04-22 12:32:46 +02:00
debug.h gpu: host1x: Add debug support 2013-04-22 12:32:46 +02:00
dev.c drm/tegra: Add gr2d device 2013-04-22 12:40:04 +02:00
dev.h gpu: host1x: Remove second host1x driver 2013-04-22 12:39:59 +02:00
host1x_bo.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
host1x_client.h gpu: host1x: Remove second host1x driver 2013-04-22 12:39:59 +02:00
host1x.h drm/tegra: Add gr2d device 2013-04-22 12:40:04 +02:00
intr.c gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
intr.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
job.c gpu: host1x: Copy gathers before verification 2013-06-22 12:43:53 +02:00
job.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00
Kconfig drm/tegra: Move drm to live under host1x 2013-04-22 12:39:11 +02:00
Makefile drm/tegra: Add gr2d device 2013-04-22 12:40:04 +02:00
syncpt.c gpu: host1x: Add debug support 2013-04-22 12:32:46 +02:00
syncpt.h gpu: host1x: Add channel support 2013-04-22 12:32:43 +02:00