]> git.itanic.dy.fi Git - linux-stable/commit
drm: stop vmgfx driver explosion
authorAlan Cox <alan@linux.intel.com>
Mon, 20 Aug 2012 14:44:52 +0000 (14:44 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 14 Sep 2012 16:59:35 +0000 (09:59 -0700)
commitcedb1ad1ad0c585ec4f048639392a6f2db764ba3
treefd793e3c1f713ea64d7a46eedd2143e8c86262b9
parent0c0b1673a5b1b258d4f1064043557afdffd333f4
drm: stop vmgfx driver explosion

commit f5869a8308f77e3dfdc2e3640842b285aa788ff8 upstream.

If you do a page flip with no flags set then event is NULL. If event is
NULL then the vmw_gfx driver likes to go digging into NULL and extracts
NULL->base.file_priv.

On a modern kernel with NULL mapping protection it's just another oops,
without it there are some "intriguing" possibilities.

What it should do is an open question but that for the driver owners to
sort out.

Signed-off-by: Alan Cox <alan@linux.intel.com>
Reviewed-by: Jakob Bornecrantz <jakob@vmware.com>
Signed-off-by: Dave Airlie <airlied@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c