drm/tegra: gem: dumb: pitch and size are outputs
authorThierry Reding <treding@nvidia.com>
Thu, 30 Oct 2014 14:32:56 +0000 (15:32 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 8 Jan 2015 18:27:46 +0000 (10:27 -0800)
commita2585bd7780db89432a2a06b28d9af9a8b6ed8ca
tree48a3782b76cd55f6682fe8c1b85c621e4df8a0b3
parentab4a21c783152a31060f57201afc983e65ef94f8
drm/tegra: gem: dumb: pitch and size are outputs

commit dc6057ecb39edb34b0461ca55382094410bd257a upstream.

When creating a dumb buffer object using the DRM_IOCTL_MODE_CREATE_DUMB
IOCTL, only the width, height, bpp and flags parameters are inputs. The
caller is not guaranteed to zero out or set handle, pitch and size, so
the driver must not treat these values as possible inputs.

Fixes a bug where running the Weston compositor on Tegra DRM would cause
an attempt to allocate a 3 GiB framebuffer to be allocated.

Fixes: de2ba664c30f ("gpu: host1x: drm: Add memory manager and fb")
Signed-off-by: Thierry Reding <treding@nvidia.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/tegra/gem.c