# git rev-parse -q --verify ec7f49619d8ee13e108740c82f942cd401b989e9^{commit} ec7f49619d8ee13e108740c82f942cd401b989e9 already have revision, skipping fetch # git checkout -q -f -B kisskb ec7f49619d8ee13e108740c82f942cd401b989e9 # git clean -qxdf # < git log -1 # commit ec7f49619d8ee13e108740c82f942cd401b989e9 # Merge: d928e8f3af38 eb7bac3973d2 # Author: Linus Torvalds # Date: Fri May 13 16:20:25 2022 -0700 # # Merge tag 'drm-fixes-2022-05-14' of git://anongit.freedesktop.org/drm/drm # # Pull more drm fixes from Dave Airlie: # "Turns out I was right, some fixes hadn't made it to me yet. The vmwgfx # ones also popped up later, but all seem like bad enough things to fix. # The dma-buf, vc4 and nouveau ones are all pretty small. # # The fbdev fixes are a bit more complicated: a fix to cleanup fbdev # devices properly, uncovered some use-after-free bugs in existing # drivers. Then the fix for those bugs wasn't correct. This reverts that # fix, and puts the proper fixes in place in the drivers to avoid the # use-after-frees. # # This has had a fair number of eyes on it at this stage, and I'm # confident enough that it puts things in the right place, and is less # dangerous than reverting our way out of the initial change at this # stage. # # fbdev: # - revert NULL deref fix that turned into a use-after-free # - prevent use-after-free in fbdev # - efifb/simplefb/vesafb: fix cleanup paths to avoid use-after-frees # # dma-buf: # - fix panic in stats setup # # vc4: # - fix hdmi build # # nouveau: # - tegra iommu present fix # - fix leak in backlight name # # vmwgfx: # - Black screen due to fences using FIFO checks on SVGA3 # - Random black screens on boot due to uninitialized drm_mode_fb_cmd2 # - Hangs on SVGA3 due to command buffers being used with gbobjects" # # * tag 'drm-fixes-2022-05-14' of git://anongit.freedesktop.org/drm/drm: # drm/vmwgfx: Disable command buffers on svga3 without gbobjects # drm/vmwgfx: Initialize drm_mode_fb_cmd2 # drm/vmwgfx: Fix fencing on SVGAv3 # drm/vc4: hdmi: Fix build error for implicit function declaration # dma-buf: call dma_buf_stats_setup after dmabuf is in valid list # fbdev: efifb: Fix a use-after-free due early fb_info cleanup # drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() # drm/nouveau/tegra: Stop using iommu_present() # fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove # fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove # fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove # fbdev: Prevent possible use-after-free in fb_release() # Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" # < /opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux-gcc --version # < /opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux-ld --version # < git log --format=%s --max-count=1 ec7f49619d8ee13e108740c82f942cd401b989e9 # < make -s -j 32 ARCH=powerpc O=/kisskb/build/linus_skiroot_defconfig_powerpc-gcc11 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux- skiroot_defconfig # < make -s -j 32 ARCH=powerpc O=/kisskb/build/linus_skiroot_defconfig_powerpc-gcc11 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux- help # make -s -j 32 ARCH=powerpc O=/kisskb/build/linus_skiroot_defconfig_powerpc-gcc11 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux- olddefconfig # make -s -j 32 ARCH=powerpc O=/kisskb/build/linus_skiroot_defconfig_powerpc-gcc11 CROSS_COMPILE=/opt/cross/kisskb/korg/gcc-11.1.0-nolibc/powerpc64-linux/bin/powerpc64-linux- In file included from /kisskb/src/include/linux/byteorder/little_endian.h:5, from /kisskb/src/arch/powerpc/include/uapi/asm/byteorder.h:12, from /kisskb/src/include/asm-generic/bitops/le.h:6, from /kisskb/src/arch/powerpc/include/asm/bitops.h:336, from /kisskb/src/include/linux/bitops.h:33, from /kisskb/src/include/linux/kernel.h:22, from /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:46: /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c: In function '_base_make_ioc_operational': /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5396:40: warning: array subscript 'Mpi2SasIOUnitPage1_t {aka struct _MPI2_CONFIG_PAGE_SASIOUNIT_1}[0]' is partly outside array bounds of 'unsigned char[20]' [-Warray-bounds] 5396 | (le16_to_cpu(sas_iounit_pg1->SASWideMaxQueueDepth)) ? /kisskb/src/include/uapi/linux/byteorder/little_endian.h:37:51: note: in definition of macro '__le16_to_cpu' 37 | #define __le16_to_cpu(x) ((__force __u16)(__le16)(x)) | ^ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5396:14: note: in expansion of macro 'le16_to_cpu' 5396 | (le16_to_cpu(sas_iounit_pg1->SASWideMaxQueueDepth)) ? | ^~~~~~~~~~~ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5382:26: note: referencing an object of size 20 allocated by 'kzalloc' 5382 | sas_iounit_pg1 = kzalloc(sz, GFP_KERNEL); | ^~~~~~~~~~~~~~~~~~~~~~~ In file included from /kisskb/src/include/linux/byteorder/little_endian.h:5, from /kisskb/src/arch/powerpc/include/uapi/asm/byteorder.h:12, from /kisskb/src/include/asm-generic/bitops/le.h:6, from /kisskb/src/arch/powerpc/include/asm/bitops.h:336, from /kisskb/src/include/linux/bitops.h:33, from /kisskb/src/include/linux/kernel.h:22, from /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:46: /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5400:40: warning: array subscript 'Mpi2SasIOUnitPage1_t {aka struct _MPI2_CONFIG_PAGE_SASIOUNIT_1}[0]' is partly outside array bounds of 'unsigned char[20]' [-Warray-bounds] 5400 | (le16_to_cpu(sas_iounit_pg1->SASNarrowMaxQueueDepth)) ? /kisskb/src/include/uapi/linux/byteorder/little_endian.h:37:51: note: in definition of macro '__le16_to_cpu' 37 | #define __le16_to_cpu(x) ((__force __u16)(__le16)(x)) | ^ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5400:14: note: in expansion of macro 'le16_to_cpu' 5400 | (le16_to_cpu(sas_iounit_pg1->SASNarrowMaxQueueDepth)) ? | ^~~~~~~~~~~ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5382:26: note: referencing an object of size 20 allocated by 'kzalloc' 5382 | sas_iounit_pg1 = kzalloc(sz, GFP_KERNEL); | ^~~~~~~~~~~~~~~~~~~~~~~ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5403:43: warning: array subscript 'Mpi2SasIOUnitPage1_t {aka struct _MPI2_CONFIG_PAGE_SASIOUNIT_1}[0]' is partly outside array bounds of 'unsigned char[20]' [-Warray-bounds] 5403 | ioc->max_sata_qd = (sas_iounit_pg1->SATAMaxQDepth) ? | ~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~ /kisskb/src/drivers/scsi/mpt3sas/mpt3sas_base.c:5382:26: note: referencing an object of size 20 allocated by 'kzalloc' 5382 | sas_iounit_pg1 = kzalloc(sz, GFP_KERNEL); | ^~~~~~~~~~~~~~~~~~~~~~~ Completed OK # rm -rf /kisskb/build/linus_skiroot_defconfig_powerpc-gcc11 # Build took: 0:01:33.625504