Merge branch 'vmwgfx-fixes-4.15' of git://people.freedesktop.org/~thomash/linux into...
authorDave Airlie <airlied@redhat.com>
Fri, 12 Jan 2018 01:47:40 +0000 (11:47 +1000)
committerDave Airlie <airlied@redhat.com>
Fri, 12 Jan 2018 01:47:40 +0000 (11:47 +1000)
commit477d70b6735405c26803e2b93069673db294d3ef
tree0d88e4221e95feba2d612f043698be375dd5a4e9
parentc59beeaf1555f0b8380e70e480bf4618454237af
parent0d9cac0ca0429830c40fe1a4e50e60f6221fd7b6
Merge branch 'vmwgfx-fixes-4.15' of git://people.freedesktop.org/~thomash/linux into drm-fixes

Two important fixes for vmwgfx.
The off-by-one fix could cause a malicious user to potentially crash the
kernel.
The framebuffer map cache fix can under some circumstances enable a user to
read from or write to freed pages.

* 'vmwgfx-fixes-4.15' of git://people.freedesktop.org/~thomash/linux:
  drm/vmwgfx: Potential off by one in vmw_view_add()
  drm/vmwgfx: Don't cache framebuffer maps