This is a note to let you know that I've just added the patch titled drm/vmwgfx: Fix nasty write past alloced memory area
to the 3.4-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: drm-vmwgfx-fix-nasty-write-past-alloced-memory-area.patch and it can be found in the queue-3.4 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@vger.kernel.org> know about it. >From 0824db38e515644f8d1bfd64adbd7cb2c6ea7c62 Mon Sep 17 00:00:00 2001 From: Thomas Hellstrom <thellst...@vmware.com> Date: Fri, 1 Jun 2012 15:48:04 +0200 Subject: drm/vmwgfx: Fix nasty write past alloced memory area From: Thomas Hellstrom <thellst...@vmware.com> commit 0824db38e515644f8d1bfd64adbd7cb2c6ea7c62 upstream. Signed-off-by: Thomas Hellstrom <thellst...@vmware.com> Reviewed-by: Jakob Bornecrantz <ja...@vmware.com> Signed-off-by: Dave Airlie <airl...@redhat.com> Signed-off-by: Greg Kroah-Hartman <gre...@linuxfoundation.org> --- drivers/gpu/drm/vmwgfx/vmwgfx_gmr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/gpu/drm/vmwgfx/vmwgfx_gmr.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_gmr.c @@ -66,7 +66,7 @@ static int vmw_gmr2_bind(struct vmw_priv cmd += sizeof(remap_cmd) / sizeof(uint32); for (i = 0; i < num_pages; ++i) { - if (VMW_PPN_SIZE > 4) + if (VMW_PPN_SIZE <= 4) *cmd = page_to_pfn(*pages++); else *((uint64_t *)cmd) = page_to_pfn(*pages++); Patches currently in stable-queue which might be from thellst...@vmware.com are queue-3.4/drm-vmwgfx-fix-nasty-write-past-alloced-memory-area.patch queue-3.4/drm-ttm-fix-spinlock-imbalance.patch -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html