Subject : v2.6.38-rc5 drm:radeon regression Submitter : Jörg Otte <jrg.otte@googlemail.com> Date : 2011-02-18 11:47 Message-ID : AANLkTi=6x93A11MzAjKyqO+7aP3t7QD8eMh7XVWp8GD6@mail.gmail.com References : http://marc.info/?l=linux-kernel&m=129803001230359&w=2 This entry is being used for tracking a regression from 2.6.37. Please don't close it until the problem is fixed in the mainline.
From http://marc.info/?l=linux-kernel&m=129803001230359&w=2 : fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef Author: Marek Olšák <maraeo@gmail.com> Date: Mon Feb 14 01:01:10 2011 +0100 drm/radeon/kms: check AA resolve registers on r300 This is an important security fix because we allowed arbitrary values to be passed to AARESOLVE_OFFSET. This also puts the right buffer address in the register. Signed-off-by: Marek Olšák <maraeo@gmail.com> Signed-off-by: Dave Airlie <airlied@redhat.com> :040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742 5b872a00532f36c0514790223375f1377a588501 M drivers
First-Bad-Commit : fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
This was fixed with commit 45e4039c3aea597ede44a264cea322908cdedfe9 in Dave Airlie's drm-fixes branch.