]> git.karo-electronics.de Git - karo-tx-linux.git/commit
drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)
authorDave Airlie <airlied@redhat.com>
Mon, 6 Aug 2007 23:09:51 +0000 (09:09 +1000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 9 Aug 2007 21:27:32 +0000 (14:27 -0700)
commit397f3076fdeb9f71d67c6376b8366dfddeaae4ed
tree624f4a353cdf77bc89a1d0d88faea92b64da44ee
parent36e1ed699210fd0173dfe0a8b2cde8a6b648ba3f
drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)

This 965G and above chipsets moved the batch buffer non-secure bits to
another place. This means that previous drm's allowed in-secure batchbuffers
to be submitted to the hardware from non-privileged users who are logged
into X and and have access to direct rendering.

Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/char/drm/i915_dma.c
drivers/char/drm/i915_drv.h