1. 24 Jan, 2010 16 commits
  2. 20 Jan, 2010 14 commits
  3. 17 Jan, 2010 6 commits
  4. 14 Jan, 2010 4 commits
    • Dave Airlie's avatar
      Merge remote branch 'korg/drm-radeon-testing' into drm-linus · 8471a26b
      Dave Airlie authored
      * korg/drm-radeon-testing:
        drm/radeon/kms: Use radeon_agp_disable when disabling AGP
        drm/radeon/kms: Disable AGP is aperture size < 32M
        drm/radeon/kms: Fix r600 blit cleanup path
        drm/radeon/kms: Do not unpin buffer in fb destruction
        drm/radeon/kms: fix displayport->dvi connector DDC.
    • Jerome Glisse's avatar
      drm: EDID accept separate sync video mode · 79b7dcb2
      Jerome Glisse authored
      X is accepting such video mode, do the same. Pointed out by Joshua Roys
      on IRC. Fix https://bugzilla.redhat.com/show_bug.cgi?id=540024
      [fix printf to use composite not integrated :- airlied]
      Signed-off-by: default avatarJerome Glisse <jglisse@redhat.com>
      Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
    • Dave Airlie's avatar
      Merge remote branch 'nouveau/for-airlied' of ../drm-nouveau-next into drm-linus · 1c974dc2
      Dave Airlie authored
      * 'nouveau/for-airlied' of ../drm-nouveau-next: (44 commits)
        drm/nouveau: check pushbuffer bounds in ioctl
        drm/nouveau: reserve VGA area for the moment
        drm/nouveau: Unset the EDID connector property when the EDID block goes away.
        drm/nouveau: Fallback to analog load detection when the EDID block is invalid.
        drm/nouveau: fix edid memleak in nouveau_connector
        drm/nouveau: Break some long lines.
        drm/nouveau: add NV18 device id to call_lvds_manufacturer_script
        drm/nv50: Fix typo in PGRAPH initialisation.
        drm/nouveau: less magic DCB 1.5 parsing
        drm/nouveau: assume no nv04 board has a DCB table
        drm/nouveau: remove PRIV0 check in nouveau_mem_close()
        drm/nouveau: wait on fence after bo move if validating for another channel
        drm/nouveau: trust init table registers are safe
        drm/nv50: wait for pgraph to idle before unloading the context
    • Luca Barbieri's avatar
      drm/nouveau: check pushbuffer bounds in ioctl · 12f735b7
      Luca Barbieri authored
      Currently there is no check that the pushbuffer request bounds are inside
      the TTM BO.
      This allows to instruct the kernel to do relocations on user-selected
      addresses, since the relocation bounds checking relies on the request
      This can oops the kernel accidentally and is easily exploitable.
      This patch adds bound checking and alignment checking for ->offset and
      It also makes some variables unsigned, which should have no effect,
      but prevents possible bounds checking problems.
      Signed-off-by: default avatarLuca Barbieri <luca@luca-barbieri.com>
      Signed-off-by: default avatarBen Skeggs <bskeggs@redhat.com>