linux-toradex.git/drivers/char/agp, branch v2.6.27.23

agp: zero pages before sending to userspace

2009-05-02T17:24:33+00:00

upstream commit: 59de2bebabc5027f93df999d59cc65df591c3e6e

CVE-2009-1192

AGP pages might be mapped into userspace finally, so the pages should be
set to zero before userspace can use it. Otherwise there is potential
information leakage.

Signed-off-by: Shaohua Li 
Signed-off-by: Dave Airlie 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

intel-agp: fix a panic with 1M of shared memory, no GTT entries

2009-03-17T00:52:53+00:00

commit 9c1e8a4ebcc04226cb6f3a1bf1d72f4cafd6b089 upstream.

When GTT size is equal to amount of video memory, the amount of GTT
entries is computed lower than zero, which is invalid and leads to
off-by-one error in intel_i915_configure()

Originally posted here:
http://bugzilla.kernel.org/show_bug.cgi?id=12539
http://bugzilla.redhat.com/show_bug.cgi?id=445592

Signed-off-by: Lubomir Rintel 
Cc: Lubomir Rintel 
Cc: Dave Airlie 
Reviewed-by: Eric Anholt 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds 
Signed-off-by: Greg Kroah-Hartman

agp/intel: Reduce extraneous PCI posting reads during init

2009-02-12T17:31:00+00:00

commit 44d494417278e49f5b42bd3ded1801b6d2254db8 upstream.

Instead of doing a posting read after each GTT entry update, do a single one
at the end of the writes. This should reduce boot time a tiny amount by
avoiding a lot of extra uncached reads.

Signed-off-by: Keith Packard 
Signed-off-by: Eric Anholt 
Signed-off-by: Dave Airlie 
Signed-off-by: Greg Kroah-Hartman

agp/intel: Fix broken ® symbol in device name.

2009-02-12T17:31:00+00:00

commit b854b2ab959e8175d75e01cf8ed452ed2624d0c8 upstream.

Signed-off-by: Eric Anholt 
Signed-off-by: Dave Airlie 
Signed-off-by: Greg Kroah-Hartman

agp/intel: add support for G41 chipset

2009-02-12T17:31:00+00:00

commit a50ccc6c6623ab0e64f2109881e07c176b2d876f upstream.

Signed-off-by: Zhenyu Wang 
Signed-off-by: Eric Anholt 
Signed-off-by: Dave Airlie 
Signed-off-by: Greg Kroah-Hartman

agp: Fix stolen memory counting on G4X.

2008-11-07T03:05:36+00:00

commit 82e14a6215cbc9804ecc35281e973c6c8ce22fe7 upstream

On the GM45, the amount of stolen memory mapped to the GTT was underestimated,
even though we had 508KB more available since the GTT doesn't take from
stolen memory. On the non-GM45 G4X, we overestimated how much stolen was
mapped to the GTT by 4KB, resulting in GPU page faults when that page was
accessed.

This update requires a corresponding update to xf86-video-intel to work
correctly.

Signed-off-by: Eric Anholt 
Signed-off-by: Dave Airlie 
Signed-off-by: Greg Kroah-Hartman

agp: fix SIS 5591/5592 wrong PCI id

2008-08-12T00:13:38+00:00

The correct id is the id of the main host (5591) not
the id of the PCI-to-PCI bridge AGP (0001).
Output from "lspci -nv" shows that only the former
has AGP capabilities flag set:

00:00.0 0600: 1039:5591 (rev 02)
        Flags: bus master, medium devsel, latency 64
        Memory at ec000000 (32-bit, non-prefetchable) [size=32M]
        Capabilities: [c0] AGP version 1.0

00:02.0 0604: 1039:0001 (prog-if 00 [Normal decode])
        Flags: bus master, fast devsel, latency 0
        Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
        I/O behind bridge: 0000c000-0000cfff
        Memory behind bridge: eb500000-eb5fffff
        Prefetchable memory behind bridge: eb300000-eb3fffff

Signed-off-by: Krzysztof Helt 
Signed-off-by: Dave Airlie

intel/agp: rewrite GTT on resume

2008-08-12T00:13:38+00:00

On my Intel chipset (965GM), the GTT is entirely erased across
suspend/resume.  This patch simply re-plays the current mapping at resume
time to restore the table.=20

I noticed this once I started relying on persistent GTT mappings across VT
switch in our GEM work -- the old X server and DRM code carefully unbind
all memory from the GTT on VT switch, but GEM does not bother.

I placed the list management and rewrite code in the generic layer on the
assumption that it will be needed on other hardware, but I did not add the
rewrite call to anything other than the Intel resume function.

Keep a list of current GATT mappings.  At resume time, rewrite them into
the GATT.  This is needed on Intel (at least) as the entire GATT is
cleared across suspend/resume.

[akpm@linux-foundation.org: coding-style fixes]
Signed-off-by: Keith Packard 
Cc: Dave Jones 
Cc: Andi Kleen 
Signed-off-by: Andrew Morton 
Signed-off-by: Dave Airlie

agp: use dev_printk when possible

2008-08-12T00:13:38+00:00

Convert printks to use dev_printk().

Signed-off-by: Bjorn Helgaas 
Signed-off-by: Andrew Morton 
Signed-off-by: Dave Airlie

amd64-agp: run fallback when no bridges found, not when driver registration fails

2008-08-12T00:13:37+00:00

I think the intent was that if no bridges matched agp_amd64_pci_table[],
we would fall back to checking for any bridge with the AGP capability.
But in the current code, we execute the fallback path only when
pci_register_driver() itself fails, which is unrelated to whether any
matching devices were found.

This patch counts the AGP bridges found in the probe() method and executes
the fallback path when none is found.

Signed-off-by: Bjorn Helgaas 
Signed-off-by: Andrew Morton 
Signed-off-by: Dave Airlie