Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit ff02b13f authored by Ben Skeggs's avatar Ben Skeggs Committed by Dave Airlie
Browse files

drm/ttm: request zeroed system memory pages for new TT buffer objects 



Fixes an information leak to userspace, we were handing out un-zeroed pages
for any newly created TTM_PL_TT buffer.

Reported-by: default avatarMarcin Slusarz <marcin.slusarz@gmail.com>
Signed-off-by: default avatarBen Skeggs <bskeggs@redhat.com>
Tested-by: default avatarMarcin Slusarz <marcin.slusarz@gmail.com>
Cc: stable@kernel.org
Signed-off-by: default avatarDave Airlie <airlied@redhat.com>
parent 003f6c9d

drivers/gpu/drm/ttm/ttm_bo.c

+2 −1
Original line number Diff line number Diff line
@@ -394,7 +394,8 @@ static int ttm_bo_handle_move_mem(struct ttm_buffer_object *bo, 


	if (!(new_man->flags & TTM_MEMTYPE_FLAG_FIXED)) {

		if (bo->ttm == NULL) {

			ret = ttm_bo_add_ttm(bo, false);

			bool zero = !(old_man->flags & TTM_MEMTYPE_FLAG_FIXED);

			ret = ttm_bo_add_ttm(bo, zero);

			if (ret)

				goto out_err;

		}