drm-misc-next-fixes for v5.9-rc1:
- Fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi - Fix a fbcon OOB read in fbdev, found by syzbot. - Mark vga_tryget static as it's not used elsewhere. - Small fixes to xlnx. - Remove null check for kfree in drm_dev_release. - Fix DRM_FORMAT_MOD_AMLOGIC_FBC definition. - Fix mode initialization in omap_connector_mode_valid(). -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEuXvWqAysSYEJGuVH/lWMcqZwE8MFAl8qgxUACgkQ/lWMcqZw E8OvvxAAg6LGiVRcy1TUM3zQ2HJWKybNHaFiKmwkNrmX8e2071QKXLKQuxrDQh7h 799uwt2BKDNMT2zu6qkwrtF7FBwl/UxbAMhNFgEpZMcwsUfHg1tM66Id86iNtv+E 3dqH+xvU+aqyNHK8JTwHB2GMDbIOpVb2LEM50jX7SUINXaJgInuAcucMpbFXrMVh joSeydmrLghn5wKa4Jr7VGeVm72h6Q3v0HL5ICRoQCpmaggVNy7nzjg/WMdHZ5da xTVFVmz1iiPtqisWSppsHlVyJ4vKNyYdf6ft69nSfT2hyPjFfmSX16HT1H5pIRPY EzjnOHUIb5GS8rpEfaS3DevqgwWxda5F4TY2eZJ2u1oabhZfqMLMN+P+Y5bFXKPk Sw9rD2KWwJD1v3RNLH3tSwAyBo2ZMn8T3XfpIstuix0sn589aZLrsOajK+HazQs3 80C5sGOJpTh35AHJiXQvNwd53IDxUStevS9vRVD0H/GsQ0TaBpZj5on0Rx+T82Of EfnOcu1QnMtFRfp2wfhLr+NYRwWkvtX2O9r5nrQqDiNbln5sXbt4gSzmvpzKnbhV cdQuVLjf2rzWZcdnmRZTthNQBKQsMmHfJnCOB3cXyQrMblAyvPAfJqxU823WlNpv 85l80Y6VQNkuAEYjLWzbfKiz6e/T10LIBuMnE1c8iDe++zcanas= =t36D -----END PGP SIGNATURE----- Merge tag 'drm-misc-next-fixes-2020-08-05' of git://anongit.freedesktop.org/drm/drm-misc into drm-next drm-misc-next-fixes for v5.9-rc1: - Fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi - Fix a fbcon OOB read in fbdev, found by syzbot. - Mark vga_tryget static as it's not used elsewhere. - Small fixes to xlnx. - Remove null check for kfree in drm_dev_release. - Fix DRM_FORMAT_MOD_AMLOGIC_FBC definition. - Fix mode initialization in omap_connector_mode_valid(). Signed-off-by: Dave Airlie <airlied@redhat.com> From: Maarten Lankhorst <maarten.lankhorst@linux.intel.com> Link: https://patchwork.freedesktop.org/patch/msgid/b2043dad-f118-bd19-54a6-f23bf6264007@linux.intel.com
This commit is contained in:
@ -4308,11 +4308,11 @@ bool drm_dp_mst_allocate_vcpi(struct drm_dp_mst_topology_mgr *mgr,
|
||||
{
|
||||
int ret;
|
||||
|
||||
port = drm_dp_mst_topology_get_port_validated(mgr, port);
|
||||
if (!port)
|
||||
if (slots < 0)
|
||||
return false;
|
||||
|
||||
if (slots < 0)
|
||||
port = drm_dp_mst_topology_get_port_validated(mgr, port);
|
||||
if (!port)
|
||||
return false;
|
||||
|
||||
if (port->vcpi.vcpi > 0) {
|
||||
@ -4328,6 +4328,7 @@ bool drm_dp_mst_allocate_vcpi(struct drm_dp_mst_topology_mgr *mgr,
|
||||
if (ret) {
|
||||
DRM_DEBUG_KMS("failed to init vcpi slots=%d max=63 ret=%d\n",
|
||||
DIV_ROUND_UP(pbn, mgr->pbn_div), ret);
|
||||
drm_dp_mst_topology_put_port(port);
|
||||
goto out;
|
||||
}
|
||||
DRM_DEBUG_KMS("initing vcpi for pbn=%d slots=%d\n",
|
||||
|
@ -815,8 +815,7 @@ static void drm_dev_release(struct kref *ref)
|
||||
|
||||
drm_managed_release(dev);
|
||||
|
||||
if (dev->managed.final_kfree)
|
||||
kfree(dev->managed.final_kfree);
|
||||
kfree(dev->managed.final_kfree);
|
||||
}
|
||||
|
||||
/**
|
||||
|
@ -89,7 +89,7 @@ static enum drm_mode_status omap_connector_mode_valid(struct drm_connector *conn
|
||||
struct drm_display_mode *mode)
|
||||
{
|
||||
struct omap_connector *omap_connector = to_omap_connector(connector);
|
||||
struct drm_display_mode new_mode = { { 0 } };
|
||||
struct drm_display_mode new_mode = {};
|
||||
enum drm_mode_status status;
|
||||
|
||||
status = omap_connector_mode_fixup(omap_connector->output, mode,
|
||||
|
@ -44,7 +44,7 @@ MODULE_PARM_DESC(aux_timeout_ms, "DP aux timeout value in msec (default: 50)");
|
||||
*/
|
||||
static uint zynqmp_dp_power_on_delay_ms = 4;
|
||||
module_param_named(power_on_delay_ms, zynqmp_dp_power_on_delay_ms, uint, 0444);
|
||||
MODULE_PARM_DESC(aux_timeout_ms, "DP power on delay in msec (default: 4)");
|
||||
MODULE_PARM_DESC(power_on_delay_ms, "DP power on delay in msec (default: 4)");
|
||||
|
||||
/* Link configuration registers */
|
||||
#define ZYNQMP_DP_LINK_BW_SET 0x0
|
||||
@ -567,34 +567,37 @@ static int zynqmp_dp_mode_configure(struct zynqmp_dp *dp, int pclock,
|
||||
u8 current_bw)
|
||||
{
|
||||
int max_rate = dp->link_config.max_rate;
|
||||
u8 bws[3] = { DP_LINK_BW_1_62, DP_LINK_BW_2_7, DP_LINK_BW_5_4 };
|
||||
u8 bw_code;
|
||||
u8 max_lanes = dp->link_config.max_lanes;
|
||||
u8 max_link_rate_code = drm_dp_link_rate_to_bw_code(max_rate);
|
||||
u8 bpp = dp->config.bpp;
|
||||
u8 lane_cnt;
|
||||
s8 i;
|
||||
|
||||
if (current_bw == DP_LINK_BW_1_62) {
|
||||
/* Downshift from current bandwidth */
|
||||
switch (current_bw) {
|
||||
case DP_LINK_BW_5_4:
|
||||
bw_code = DP_LINK_BW_2_7;
|
||||
break;
|
||||
case DP_LINK_BW_2_7:
|
||||
bw_code = DP_LINK_BW_1_62;
|
||||
break;
|
||||
case DP_LINK_BW_1_62:
|
||||
dev_err(dp->dev, "can't downshift. already lowest link rate\n");
|
||||
return -EINVAL;
|
||||
}
|
||||
|
||||
for (i = ARRAY_SIZE(bws) - 1; i >= 0; i--) {
|
||||
if (current_bw && bws[i] >= current_bw)
|
||||
continue;
|
||||
|
||||
if (bws[i] <= max_link_rate_code)
|
||||
break;
|
||||
default:
|
||||
/* If not given, start with max supported */
|
||||
bw_code = max_link_rate_code;
|
||||
break;
|
||||
}
|
||||
|
||||
for (lane_cnt = 1; lane_cnt <= max_lanes; lane_cnt <<= 1) {
|
||||
int bw;
|
||||
u32 rate;
|
||||
|
||||
bw = drm_dp_bw_code_to_link_rate(bws[i]);
|
||||
bw = drm_dp_bw_code_to_link_rate(bw_code);
|
||||
rate = zynqmp_dp_max_rate(bw, lane_cnt, bpp);
|
||||
if (pclock <= rate) {
|
||||
dp->mode.bw_code = bws[i];
|
||||
dp->mode.bw_code = bw_code;
|
||||
dp->mode.lane_cnt = lane_cnt;
|
||||
dp->mode.pclock = pclock;
|
||||
return dp->mode.bw_code;
|
||||
@ -1308,7 +1311,7 @@ zynqmp_dp_connector_detect(struct drm_connector *connector, bool force)
|
||||
ret = drm_dp_dpcd_read(&dp->aux, 0x0, dp->dpcd,
|
||||
sizeof(dp->dpcd));
|
||||
if (ret < 0) {
|
||||
dev_dbg(dp->dev, "DPCD read failes");
|
||||
dev_dbg(dp->dev, "DPCD read failed");
|
||||
goto disconnected;
|
||||
}
|
||||
|
||||
|
@ -529,7 +529,7 @@ EXPORT_SYMBOL(vga_get);
|
||||
*
|
||||
* 0 on success, negative error code on failure.
|
||||
*/
|
||||
int vga_tryget(struct pci_dev *pdev, unsigned int rsrc)
|
||||
static int vga_tryget(struct pci_dev *pdev, unsigned int rsrc)
|
||||
{
|
||||
struct vga_device *vgadev;
|
||||
unsigned long flags;
|
||||
@ -554,7 +554,6 @@ bail:
|
||||
spin_unlock_irqrestore(&vga_lock, flags);
|
||||
return rc;
|
||||
}
|
||||
EXPORT_SYMBOL(vga_tryget);
|
||||
|
||||
/**
|
||||
* vga_put - release lock on legacy VGA resources
|
||||
|
@ -957,7 +957,6 @@ static int fb_check_caps(struct fb_info *info, struct fb_var_screeninfo *var,
|
||||
int
|
||||
fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
|
||||
{
|
||||
int flags = info->flags;
|
||||
int ret = 0;
|
||||
u32 activate;
|
||||
struct fb_var_screeninfo old_var;
|
||||
@ -1052,9 +1051,6 @@ fb_set_var(struct fb_info *info, struct fb_var_screeninfo *var)
|
||||
event.data = &mode;
|
||||
fb_notifier_call_chain(FB_EVENT_MODE_CHANGE, &event);
|
||||
|
||||
if (flags & FBINFO_MISC_USEREVENT)
|
||||
fbcon_update_vcs(info, activate & FB_ACTIVATE_ALL);
|
||||
|
||||
return 0;
|
||||
}
|
||||
EXPORT_SYMBOL(fb_set_var);
|
||||
@ -1105,9 +1101,9 @@ static long do_fb_ioctl(struct fb_info *info, unsigned int cmd,
|
||||
return -EFAULT;
|
||||
console_lock();
|
||||
lock_fb_info(info);
|
||||
info->flags |= FBINFO_MISC_USEREVENT;
|
||||
ret = fb_set_var(info, &var);
|
||||
info->flags &= ~FBINFO_MISC_USEREVENT;
|
||||
if (!ret)
|
||||
fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
|
||||
unlock_fb_info(info);
|
||||
console_unlock();
|
||||
if (!ret && copy_to_user(argp, &var, sizeof(var)))
|
||||
|
@ -91,9 +91,9 @@ static int activate(struct fb_info *fb_info, struct fb_var_screeninfo *var)
|
||||
|
||||
var->activate |= FB_ACTIVATE_FORCE;
|
||||
console_lock();
|
||||
fb_info->flags |= FBINFO_MISC_USEREVENT;
|
||||
err = fb_set_var(fb_info, var);
|
||||
fb_info->flags &= ~FBINFO_MISC_USEREVENT;
|
||||
if (!err)
|
||||
fbcon_update_vcs(fb_info, var->activate & FB_ACTIVATE_ALL);
|
||||
console_unlock();
|
||||
if (err)
|
||||
return err;
|
||||
|
@ -29,6 +29,7 @@
|
||||
#include <linux/freezer.h>
|
||||
#include <linux/uaccess.h>
|
||||
#include <linux/fb.h>
|
||||
#include <linux/fbcon.h>
|
||||
#include <linux/init.h>
|
||||
|
||||
#include <asm/cell-regs.h>
|
||||
@ -824,12 +825,12 @@ static int ps3fb_ioctl(struct fb_info *info, unsigned int cmd,
|
||||
var = info->var;
|
||||
fb_videomode_to_var(&var, vmode);
|
||||
console_lock();
|
||||
info->flags |= FBINFO_MISC_USEREVENT;
|
||||
/* Force, in case only special bits changed */
|
||||
var.activate |= FB_ACTIVATE_FORCE;
|
||||
par->new_mode_id = val;
|
||||
retval = fb_set_var(info, &var);
|
||||
info->flags &= ~FBINFO_MISC_USEREVENT;
|
||||
if (!retval)
|
||||
fbcon_update_vcs(info, var.activate & FB_ACTIVATE_ALL);
|
||||
console_unlock();
|
||||
}
|
||||
break;
|
||||
|
@ -400,8 +400,6 @@ struct fb_tile_ops {
|
||||
#define FBINFO_HWACCEL_YPAN 0x2000 /* optional */
|
||||
#define FBINFO_HWACCEL_YWRAP 0x4000 /* optional */
|
||||
|
||||
#define FBINFO_MISC_USEREVENT 0x10000 /* event request
|
||||
from userspace */
|
||||
#define FBINFO_MISC_TILEBLITTING 0x20000 /* use tile blitting */
|
||||
|
||||
/* A driver may set this flag to indicate that it does want a set_par to be
|
||||
|
@ -109,12 +109,6 @@ static inline int vga_get_uninterruptible(struct pci_dev *pdev,
|
||||
return vga_get(pdev, rsrc, 0);
|
||||
}
|
||||
|
||||
#if defined(CONFIG_VGA_ARB)
|
||||
extern int vga_tryget(struct pci_dev *pdev, unsigned int rsrc);
|
||||
#else
|
||||
static inline int vga_tryget(struct pci_dev *pdev, unsigned int rsrc) { return 0; }
|
||||
#endif
|
||||
|
||||
#if defined(CONFIG_VGA_ARB)
|
||||
extern void vga_put(struct pci_dev *pdev, unsigned int rsrc);
|
||||
#else
|
||||
|
@ -1004,7 +1004,7 @@ drm_fourcc_canonicalize_nvidia_format_mod(__u64 modifier)
|
||||
#define DRM_FORMAT_MOD_AMLOGIC_FBC(__layout, __options) \
|
||||
fourcc_mod_code(AMLOGIC, \
|
||||
((__layout) & __fourcc_mod_amlogic_layout_mask) | \
|
||||
((__options) & __fourcc_mod_amlogic_options_mask \
|
||||
(((__options) & __fourcc_mod_amlogic_options_mask) \
|
||||
<< __fourcc_mod_amlogic_options_shift))
|
||||
|
||||
/* Amlogic FBC Layouts */
|
||||
|
Reference in New Issue
Block a user