linux-kernel - v2.6.38-rc5: drm-radeon regression

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Sun, 20 Feb 2011 11:24:21 +0100
From:	Jörg Otte <jrg.otte@...glemail.com>
To:	linux-kernel@...r.kernel.org
Cc:	Marek Olšák <maraeo@...il.com>,
	Dave Airlie <airlied@...hat.com>
Subject: v2.6.38-rc5: drm-radeon regression

Reaching the desktop in v2.6.38-rc5 I only see the background.
No Icon,widgets,windows etc. I am under the impression
that everything is there - but invisible.

HW is Thinkpad T43 with Mobility Radeon X300 graphic.

Switching to the command line I see drm:radeon
displaying permanently :
drm:radeon_cs_ioctl          error invalid command stream
drm:r100_cd_track_check  no buffer for AA resolve buffer

I bisected the problem to:

fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit
commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
Author: Marek Olšák <maraeo@...il.com>
Date:   Mon Feb 14 01:01:10 2011 +0100

   drm/radeon/kms: check AA resolve registers on r300

   This is an important security fix because we allowed arbitrary values
   to be passed to AARESOLVE_OFFSET. This also puts the right buffer address
   in the register.

   Signed-off-by: Marek Olšák <maraeo@...il.com>
   Signed-off-by: Dave Airlie <airlied@...hat.com>

:040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742
5b872a00532f36c0514790223375f1377a588501 M drivers

Download attachment "xorg-bad" of type "application/octet-stream" (45836 bytes)