Bug 29632

Summary:	v2.6.38-rc5 drm:radeon regression
Product:	Drivers	Reporter:	Maciej Rutecki (maciej.rutecki)
Component:	Video(DRI - non Intel)	Assignee:	drivers_video-dri
Status:	CLOSED CODE_FIX
Severity:	normal	CC:	airlied, maciej.rutecki, maraeo, pedretti.fabio, rjw
Priority:	P1
Hardware:	All
OS:	Linux
Kernel Version:	2.6.38-rc5	Subsystem:
Regression:	Yes	Bisected commit-id:
Bug Depends on:
Bug Blocks:	27352

Description Maciej Rutecki 2011-02-21 20:02:50 UTC

Subject    : v2.6.38-rc5 drm:radeon regression
Submitter  : Jörg Otte <jrg.otte@googlemail.com>
Date       : 2011-02-18 11:47
Message-ID : AANLkTi=6x93A11MzAjKyqO+7aP3t7QD8eMh7XVWp8GD6@mail.gmail.com
References : http://marc.info/?l=linux-kernel&m=129803001230359&w=2

This entry is being used for tracking a regression from 2.6.37. Please don't
close it until the problem is fixed in the mainline.

Comment 1 Fabio Pedretti 2011-02-23 08:48:11 UTC

From http://marc.info/?l=linux-kernel&m=129803001230359&w=2 :

fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit
commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
Author: Marek Olšák <maraeo@gmail.com>
Date:   Mon Feb 14 01:01:10 2011 +0100

    drm/radeon/kms: check AA resolve registers on r300

    This is an important security fix because we allowed arbitrary values
    to be passed to AARESOLVE_OFFSET. This also puts the right buffer address
    in the register.

    Signed-off-by: Marek Olšák <maraeo@gmail.com>
    Signed-off-by: Dave Airlie <airlied@redhat.com>

:040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742
5b872a00532f36c0514790223375f1377a588501 M drivers

Comment 2 Rafael J. Wysocki 2011-02-23 09:13:17 UTC

First-Bad-Commit : fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef

Comment 3 Marek Olšák 2011-02-23 10:55:22 UTC

This was fixed with commit 45e4039c3aea597ede44a264cea322908cdedfe9 in Dave Airlie's drm-fixes branch.