https://bugzilla.kernel.org/show_bug.cgi?id=29632
Fabio fabio.ped@libero.it changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |fabio.ped@libero.it
--- Comment #1 from Fabio fabio.ped@libero.it 2011-02-23 08:48:11 --- From http://marc.info/?l=linux-kernel&m=129803001230359&w=2 :
fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef Author: Marek Olšák maraeo@gmail.com Date: Mon Feb 14 01:01:10 2011 +0100
drm/radeon/kms: check AA resolve registers on r300
This is an important security fix because we allowed arbitrary values to be passed to AARESOLVE_OFFSET. This also puts the right buffer address in the register.
Signed-off-by: Marek Olšák maraeo@gmail.com Signed-off-by: Dave Airlie airlied@redhat.com
:040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742 5b872a00532f36c0514790223375f1377a588501 M drivers