From mboxrd@z Thu Jan 1 00:00:00 1970 From: Greg Kroah-Hartman Subject: [PATCH 4.19 20/41] drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut() Date: Thu, 6 Dec 2018 15:39:00 +0100 Message-ID: <20181206142951.442912428@linuxfoundation.org> References: <20181206142949.757402551@linuxfoundation.org> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by gabe.freedesktop.org (Postfix) with ESMTPS id 90F776E5F8 for ; Thu, 6 Dec 2018 14:40:21 +0000 (UTC) In-Reply-To: <20181206142949.757402551@linuxfoundation.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dri-devel-bounces@lists.freedesktop.org Sender: "dri-devel" To: linux-kernel@vger.kernel.org Cc: Neil Armstrong , Maxime Ripard , Greg Kroah-Hartman , stable@vger.kernel.org, Sean Paul , dri-devel@lists.freedesktop.org, Kevin Hilman , Carlo Caione , linux-amlogic@lists.infradead.org, linux-arm-kernel@lists.infradead.org List-Id: dri-devel@lists.freedesktop.org NC4xOS1zdGFibGUgcmV2aWV3IHBhdGNoLiAgSWYgYW55b25lIGhhcyBhbnkgb2JqZWN0aW9ucywg cGxlYXNlIGxldCBtZSBrbm93LgoKLS0tLS0tLS0tLS0tLS0tLS0tCgpGcm9tOiBMeXVkZSBQYXVs IDxseXVkZUByZWRoYXQuY29tPgoKY29tbWl0IDk3YjJhMzE4MGE1NTlhMzM4NTJhYzBjZDc3OTA0 MTY2MDY5NDg0ZmQgdXBzdHJlYW0uCgpDdXJyZW50bHkgb24gZHJpdmVyIGJyaW5ndXAgd2l0aCBL QVNBTiBlbmFibGVkLCBtZXNvbiB0cmlnZ2VycyBhbiBPT0IKbWVtb3J5IGFjY2VzcyBhcyBzaG93 biBiZWxvdzoKClsgIDExNy45MDQ1MjhdID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQpbICAxMTcuOTA0NTYwXSBCVUc6IEtB U0FOOiBnbG9iYWwtb3V0LW9mLWJvdW5kcyBpbiBtZXNvbl92aXVfc2V0X29zZF9sdXQrMHg3YTAv MHg4OTAKWyAgMTE3LjkwNDU4OF0gUmVhZCBvZiBzaXplIDQgYXQgYWRkciBmZmZmMjAwMDBhNjNj ZTI0IGJ5IHRhc2sgc3lzdGVtZC11ZGV2ZC80OTgKWyAgMTE3LjkwNDYwMV0KWyAgMTE4LjA4MzM3 Ml0gQ1BVOiA0IFBJRDogNDk4IENvbW06IHN5c3RlbWQtdWRldmQgTm90IHRhaW50ZWQgNC4yMC4w LXJjM0x5dWRlLVRlc3QrICMyMApbICAxMTguMDkxMTQzXSBIYXJkd2FyZSBuYW1lOiBhbWxvZ2lj IGtoYWRhcy12aW0yL2toYWRhcy12aW0yLCBCSU9TIDIwMTguMDctcmMyLWFybWJpYW4gMDkvMTEv MjAxOApbICAxMTguMDk5NzY4XSBDYWxsIHRyYWNlOgpbICAxMTguMTAyMTgxXSAgZHVtcF9iYWNr dHJhY2UrMHgwLzB4M2U4ClsgIDExOC4xMDU3OTZdICBzaG93X3N0YWNrKzB4MTQvMHgyMApbICAx MTguMTA5MDgzXSAgZHVtcF9zdGFjaysweDEzMC8weDFjNApbICAxMTguMTEyNTM5XSAgcHJpbnRf YWRkcmVzc19kZXNjcmlwdGlvbisweDYwLzB4MjVjClsgIDExOC4xMTcyMTRdICBrYXNhbl9yZXBv cnQrMHgxYjQvMHgzNjgKWyAgMTE4LjEyMDg1MV0gIF9fYXNhbl9yZXBvcnRfbG9hZDRfbm9hYm9y dCsweDE4LzB4MjAKWyAgMTE4LjEyNTU2Nl0gIG1lc29uX3ZpdV9zZXRfb3NkX2x1dCsweDdhMC8w eDg5MApbICAxMTguMTI5OTUzXSAgbWVzb25fdml1X2luaXQrMHgxMGMvMHgyOTAKWyAgMTE4LjEz Mzc0MV0gIG1lc29uX2Rydl9iaW5kX21hc3RlcisweDQ3NC8weDc0OApbICAxMTguMTM4MTQxXSAg bWVzb25fZHJ2X2JpbmQrMHgxMC8weDE4ClsgIDExOC4xNDE3NjBdICB0cnlfdG9fYnJpbmdfdXBf bWFzdGVyKzB4M2Q4LzB4NzY4ClsgIDExOC4xNDYyNDldICBjb21wb25lbnRfYWRkKzB4MjE0LzB4 NTcwClsgIDExOC4xNDk5NzhdICBtZXNvbl9kd19oZG1pX3Byb2JlKzB4MTgvMHgyMCBbbWVzb25f ZHdfaGRtaV0KWyAgMTE4LjE1NTQwNF0gIHBsYXRmb3JtX2Rydl9wcm9iZSsweDk4LzB4MTM4Clsg IDExOC4xNTk0NTVdICByZWFsbHlfcHJvYmUrMHgyYTAvMHhhNzAKWyAgMTE4LjE2MzA3MF0gIGRy aXZlcl9wcm9iZV9kZXZpY2UrMHgxYjQvMHgyZDgKWyAgMTE4LjE2NzI5OV0gIF9fZHJpdmVyX2F0 dGFjaCsweDIwMC8weDI4MApbICAxMTguMTcxMTg5XSAgYnVzX2Zvcl9lYWNoX2RldisweDEwYy8w eDFhOApbICAxMTguMTc1MTQ0XSAgZHJpdmVyX2F0dGFjaCsweDM4LzB4NTAKWyAgMTE4LjE3ODY4 MV0gIGJ1c19hZGRfZHJpdmVyKzB4MzMwLzB4NjA4ClsgIDExOC4xODI0NzFdICBkcml2ZXJfcmVn aXN0ZXIrMHgxNDAvMHgzODgKWyAgMTE4LjE4NjM2MV0gIF9fcGxhdGZvcm1fZHJpdmVyX3JlZ2lz dGVyKzB4YzgvMHgxMDgKWyAgMTE4LjE5MTExN10gIG1lc29uX2R3X2hkbWlfcGxhdGZvcm1fZHJp dmVyX2luaXQrMHgxYy8weDEwMDAgW21lc29uX2R3X2hkbWldClsgIDExOC4xOTgwMjJdICBkb19v bmVfaW5pdGNhbGwrMHgxMmMvMHgzYmMKWyAgMTE4LjIwMTg4M10gIGRvX2luaXRfbW9kdWxlKzB4 MWZjLzB4NjM4ClsgIDExOC4yMDU2NzNdICBsb2FkX21vZHVsZSsweDRiNGMvMHg2ODA4ClsgIDEx OC4yMDkzODddICBfX3NlX3N5c19pbml0X21vZHVsZSsweDJlOC8weDNjMApbICAxMTguMjEzNjk5 XSAgX19hcm02NF9zeXNfaW5pdF9tb2R1bGUrMHg2OC8weDk4ClsgIDExOC4yMTgxMDBdICBlbDBf c3ZjX2NvbW1vbisweDEwNC8weDIxMApbICAxMTguMjIxODkzXSAgZWwwX3N2Y19oYW5kbGVyKzB4 NDgvMHhiOApbICAxMTguMjI1NTk0XSAgZWwwX3N2YysweDgvMHhjClsgIDExOC4yMjg0MjldClsg IDExOC4yMjk4ODddIFRoZSBidWdneSBhZGRyZXNzIGJlbG9uZ3MgdG8gdGhlIHZhcmlhYmxlOgpb ICAxMTguMjM1MDA3XSAgZW90Zl8zM19saW5lYXJfbWFwcGluZysweDg0LzB4YzAKWyAgMTE4LjIz OTMwMV0KWyAgMTE4LjI0MDc1Ml0gTWVtb3J5IHN0YXRlIGFyb3VuZCB0aGUgYnVnZ3kgYWRkcmVz czoKWyAgMTE4LjI0NTUyMl0gIGZmZmYyMDAwMGE2M2NkMDA6IDAwIDAwIDAwIDAwIDAwIDAwIDAw IDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwClsgIDExOC4yNTI2OTVdICBmZmZmMjAwMDBhNjNj ZDgwOiAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMApbICAx MTguMjU5ODUwXSA+ZmZmZjIwMDAwYTYzY2UwMDogMDAgMDAgMDAgMDAgMDQgZmEgZmEgZmEgZmEg ZmEgZmEgZmEgMDAgMDAgMDAgMDAKWyAgMTE4LjI2NzAwMF0gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIF4KWyAgMTE4LjI3MTIyMl0gIGZmZmYyMDAwMGE2M2NlODA6IDAwIGZhIGZhIGZh IGZhIGZhIGZhIGZhIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwClsgIDExOC4yNzgzOTNdICBmZmZm MjAwMDBhNjNjZjAwOiAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwNCBmYSBm YSBmYQpbICAxMTguMjg1NTQyXSA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KWyAgMTE4LjI5MjY5OV0gRGlzYWJsaW5nIGxv Y2sgZGVidWdnaW5nIGR1ZSB0byBrZXJuZWwgdGFpbnQKCkl0IHNlZW1zIHRoYXQgd2hlbiBsb29w aW5nIHRocm91Z2ggdGhlIE9TRCBFT1RGIExVVCBtYXBzLCB3ZSB1c2UgdGhlCnNhbWUgbWF4IGl0 ZXJhdG9yIGZvciBPRVRGOiAyMC4gVGhpcyBpcyB3cm9uZyB0aG91Z2gsIHNpbmNlIDIwKjIgaXMg NDAsCndoaWNoIG1lYW5zIHRoYXQgd2UnbGwgc3RvcCBvdXQgb2YgYm91bmRzIG9uIHRoZSBFT1RG IG1hcHMuCgpCdXQsIHRoaXMgd2hvbGUgdGhpbmcgaXMgYWxyZWFkeSBjb25mdXNpbmcgZW5vdWdo IHRvIHJlYWQgdGhyb3VnaCBhcy1pcywKc28gbGV0J3MganVzdCByZXBsYWNlIGFsbCBvZiB0aGUg aGFyZGNvZGVkIHNpemVzIHdpdGgKT1NEXyhPRVRGL0VPVEYpX0xVVF9TSVpFIC8gMi4KClNpZ25l ZC1vZmYtYnk6IEx5dWRlIFBhdWwgPGx5dWRlQHJlZGhhdC5jb20+CkZpeGVzOiBiYmJlNzc1ZWM1 YjUgKCJkcm06IEFkZCBzdXBwb3J0IGZvciBBbWxvZ2ljIE1lc29uIEdyYXBoaWMgQ29udHJvbGxl ciIpCkNjOiBOZWlsIEFybXN0cm9uZyA8bmFybXN0cm9uZ0BiYXlsaWJyZS5jb20+CkNjOiBNYXhp bWUgUmlwYXJkIDxtYXhpbWUucmlwYXJkQGJvb3RsaW4uY29tPgpDYzogQ2FybG8gQ2Fpb25lIDxj YXJsb0BjYWlvbmUub3JnPgpDYzogS2V2aW4gSGlsbWFuIDxraGlsbWFuQGJheWxpYnJlLmNvbT4K Q2M6IGRyaS1kZXZlbEBsaXN0cy5mcmVlZGVza3RvcC5vcmcKQ2M6IGxpbnV4LWFtbG9naWNAbGlz dHMuaW5mcmFkZWFkLm9yZwpDYzogbGludXgtYXJtLWtlcm5lbEBsaXN0cy5pbmZyYWRlYWQub3Jn CkNjOiA8c3RhYmxlQHZnZXIua2VybmVsLm9yZz4gIyB2NC4xMCsKQWNrZWQtYnk6IE5laWwgQXJt c3Ryb25nIDxuYXJtc3Ryb25nQGJheWxpYnJlLmNvbT4KU2lnbmVkLW9mZi1ieTogTmVpbCBBcm1z dHJvbmcgPG5hcm1zdHJvbmdAYmF5bGlicmUuY29tPgpMaW5rOiBodHRwczovL3BhdGNod29yay5m cmVlZGVza3RvcC5vcmcvcGF0Y2gvbXNnaWQvMjAxODExMjUwMTIxMTcuMzE5MTUtMS1seXVkZUBy ZWRoYXQuY29tClNpZ25lZC1vZmYtYnk6IFNlYW4gUGF1bCA8c2VhbnBhdWxAY2hyb21pdW0ub3Jn PgpTaWduZWQtb2ZmLWJ5OiBHcmVnIEtyb2FoLUhhcnRtYW4gPGdyZWdraEBsaW51eGZvdW5kYXRp b24ub3JnPgoKLS0tCiBkcml2ZXJzL2dwdS9kcm0vbWVzb24vbWVzb25fdml1LmMgfCAgIDEyICsr KysrKy0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9ucygrKSwgNiBkZWxldGlvbnMo LSkKCi0tLSBhL2RyaXZlcnMvZ3B1L2RybS9tZXNvbi9tZXNvbl92aXUuYworKysgYi9kcml2ZXJz L2dwdS9kcm0vbWVzb24vbWVzb25fdml1LmMKQEAgLTE4NCwxOCArMTg0LDE4IEBAIHZvaWQgbWVz b25fdml1X3NldF9vc2RfbHV0KHN0cnVjdCBtZXNvbl8KIAlpZiAobHV0X3NlbCA9PSBWSVVfTFVU X09TRF9PRVRGKSB7CiAJCXdyaXRlbCgwLCBwcml2LT5pb19iYXNlICsgX1JFRyhhZGRyX3BvcnQp KTsKIAotCQlmb3IgKGkgPSAwOyBpIDwgMjA7IGkrKykKKwkJZm9yIChpID0gMDsgaSA8IChPU0Rf T0VURl9MVVRfU0laRSAvIDIpOyBpKyspCiAJCQl3cml0ZWwocl9tYXBbaSAqIDJdIHwgKHJfbWFw W2kgKiAyICsgMV0gPDwgMTYpLAogCQkJCXByaXYtPmlvX2Jhc2UgKyBfUkVHKGRhdGFfcG9ydCkp OwogCiAJCXdyaXRlbChyX21hcFtPU0RfT0VURl9MVVRfU0laRSAtIDFdIHwgKGdfbWFwWzBdIDw8 IDE2KSwKIAkJCXByaXYtPmlvX2Jhc2UgKyBfUkVHKGRhdGFfcG9ydCkpOwogCi0JCWZvciAoaSA9 IDA7IGkgPCAyMDsgaSsrKQorCQlmb3IgKGkgPSAwOyBpIDwgKE9TRF9PRVRGX0xVVF9TSVpFIC8g Mik7IGkrKykKIAkJCXdyaXRlbChnX21hcFtpICogMiArIDFdIHwgKGdfbWFwW2kgKiAyICsgMl0g PDwgMTYpLAogCQkJCXByaXYtPmlvX2Jhc2UgKyBfUkVHKGRhdGFfcG9ydCkpOwogCi0JCWZvciAo aSA9IDA7IGkgPCAyMDsgaSsrKQorCQlmb3IgKGkgPSAwOyBpIDwgKE9TRF9PRVRGX0xVVF9TSVpF IC8gMik7IGkrKykKIAkJCXdyaXRlbChiX21hcFtpICogMl0gfCAoYl9tYXBbaSAqIDIgKyAxXSA8 PCAxNiksCiAJCQkJcHJpdi0+aW9fYmFzZSArIF9SRUcoZGF0YV9wb3J0KSk7CiAKQEAgLTIxMSwx OCArMjExLDE4IEBAIHZvaWQgbWVzb25fdml1X3NldF9vc2RfbHV0KHN0cnVjdCBtZXNvbl8KIAl9 IGVsc2UgaWYgKGx1dF9zZWwgPT0gVklVX0xVVF9PU0RfRU9URikgewogCQl3cml0ZWwoMCwgcHJp di0+aW9fYmFzZSArIF9SRUcoYWRkcl9wb3J0KSk7CiAKLQkJZm9yIChpID0gMDsgaSA8IDIwOyBp KyspCisJCWZvciAoaSA9IDA7IGkgPCAoT1NEX0VPVEZfTFVUX1NJWkUgLyAyKTsgaSsrKQogCQkJ d3JpdGVsKHJfbWFwW2kgKiAyXSB8IChyX21hcFtpICogMiArIDFdIDw8IDE2KSwKIAkJCQlwcml2 LT5pb19iYXNlICsgX1JFRyhkYXRhX3BvcnQpKTsKIAogCQl3cml0ZWwocl9tYXBbT1NEX0VPVEZf TFVUX1NJWkUgLSAxXSB8IChnX21hcFswXSA8PCAxNiksCiAJCQlwcml2LT5pb19iYXNlICsgX1JF RyhkYXRhX3BvcnQpKTsKIAotCQlmb3IgKGkgPSAwOyBpIDwgMjA7IGkrKykKKwkJZm9yIChpID0g MDsgaSA8IChPU0RfRU9URl9MVVRfU0laRSAvIDIpOyBpKyspCiAJCQl3cml0ZWwoZ19tYXBbaSAq IDIgKyAxXSB8IChnX21hcFtpICogMiArIDJdIDw8IDE2KSwKIAkJCQlwcml2LT5pb19iYXNlICsg X1JFRyhkYXRhX3BvcnQpKTsKIAotCQlmb3IgKGkgPSAwOyBpIDwgMjA7IGkrKykKKwkJZm9yIChp ID0gMDsgaSA8IChPU0RfRU9URl9MVVRfU0laRSAvIDIpOyBpKyspCiAJCQl3cml0ZWwoYl9tYXBb aSAqIDJdIHwgKGJfbWFwW2kgKiAyICsgMV0gPDwgMTYpLAogCQkJCXByaXYtPmlvX2Jhc2UgKyBf UkVHKGRhdGFfcG9ydCkpOwogCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18KZHJpLWRldmVsIG1haWxpbmcgbGlzdApkcmktZGV2ZWxAbGlzdHMuZnJlZWRl c2t0b3Aub3JnCmh0dHBzOi8vbGlzdHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8v ZHJpLWRldmVsCg==