linux-toradex.git/drivers/gpu/drm, branch v4.6-rc5

Merge branch 'drm-fixes-4.6' of git://people.freedesktop.org/~agd5f/linux into drm-fixes

2016-04-22T00:39:26+00:00

Misc radeon and amdgpu bug fixes for 4.6.

* 'drm-fixes-4.6' of git://people.freedesktop.org/~agd5f/linux:
  amdgpu/uvd: add uvd fw version for amdgpu
  drm/amdgpu: forbid mapping of userptr bo through radeon device file
  drm/radeon: forbid mapping of userptr bo through radeon device file
  drm/amdgpu: bump the afmt limit for CZ, ST, Polaris
  drm/amdgpu: use defines for CRTCs and AMFT blocks
  drm/radeon: print a message if ATPX dGPU power control is missing
  Revert "drm/radeon: disable runtime pm on PX laptops without dGPU power control"
  drm/amdgpu/acp: fix resume on CZ systems with AZ audio
  drm/radeon: add a quirk for a XFX R9 270X
  drm/radeon: print pci revision as well as pci ids on driver load
  drm/amdgpu: when suspending, if uvd/vce was running. need to cancel delay work.
  drm/radeon: fix initial connector audio value

Merge branch 'linux-4.6' of git://github.com/skeggsb/linux into drm-fixes

2016-04-22T00:09:33+00:00

transform feedback fix.

* 'linux-4.6' of git://github.com/skeggsb/linux:
  drm/nouveau/gr/gf100: select a stream master to fixup tfb offset queries

drm/nouveau/gr/gf100: select a stream master to fixup tfb offset queries

2016-04-22T00:08:05+00:00

Signed-off-by: Ben Skeggs 
Cc: stable@vger.kernel.org

amdgpu/uvd: add uvd fw version for amdgpu

2016-04-22T00:03:47+00:00

Was previously always hardcoded to 0.

Signed-off-by: Sonny Jiang 
Reviewed-by: Alex Deucher 
Signed-off-by: Alex Deucher 
Cc: stable@vger.kernel.org

drm/amdgpu: forbid mapping of userptr bo through radeon device file

2016-04-22T00:03:47+00:00

Allowing userptr bo which are basicly a list of page from some vma
(so either anonymous page or file backed page) would lead to serious
corruption of kernel structures and counters (because we overwrite
the page->mapping field when mapping buffer).

This will already block if the buffer was populated before anyone does
try to mmap it because then TTM_PAGE_FLAG_SG would be set in in the
ttm_tt flags. But that flag is check before ttm_tt_populate in the ttm
vm fault handler.

So to be safe just add a check to verify_access() callback.

Reviewed-by: Christian König 
Signed-off-by: Jérôme Glisse 
Cc: 
Signed-off-by: Alex Deucher

drm/radeon: forbid mapping of userptr bo through radeon device file

2016-04-22T00:03:46+00:00

Allowing userptr bo which are basicly a list of page from some vma
(so either anonymous page or file backed page) would lead to serious
corruption of kernel structures and counters (because we overwrite
the page->mapping field when mapping buffer).

This will already block if the buffer was populated before anyone does
try to mmap it because then TTM_PAGE_FLAG_SG would be set in in the
ttm_tt flags. But that flag is check before ttm_tt_populate in the ttm
vm fault handler.

So to be safe just add a check to verify_access() callback.

Reviewed-by: Christian König 
Signed-off-by: Jérôme Glisse 
Cc: 
Signed-off-by: Alex Deucher

drm/amdgpu: bump the afmt limit for CZ, ST, Polaris

2016-04-22T00:03:46+00:00

Fixes array overflow on these chips.

Reviewed-by: Harry Wentland 
Signed-off-by: Alex Deucher 
Cc: stable@vger.kernel.org

drm/amdgpu: use defines for CRTCs and AMFT blocks

2016-04-22T00:03:45+00:00

Prerequiste for the next patch which ups the limits.

Reviewed-by: Harry Wentland 
Signed-off-by: Alex Deucher 
Cc: stable@vger.kernel.org

drm/dp/mst: Validate port in drm_dp_payload_send_msg()

2016-04-21T23:53:17+00:00

With the joys of things running concurrently, there's always a chance
that the port we get passed in drm_dp_payload_send_msg() isn't actually
valid anymore. Because of this, we need to make sure we validate the
reference to the port before we use it otherwise we risk running into
various race conditions. For instance, on the Dell MST monitor I have
here for testing, hotplugging it enough times causes us to kernel panic:

[drm:intel_mst_enable_dp] 1
[drm:drm_dp_update_payload_part2] payload 0 1
[drm:intel_get_hpd_pins] hotplug event received, stat 0x00200000, dig 0x10101011, pins 0x00000020
[drm:intel_hpd_irq_handler] digital hpd port B - short
[drm:intel_dp_hpd_pulse] got hpd irq on port B - short
[drm:intel_dp_check_mst_status] got esi 00 10 00
[drm:drm_dp_update_payload_part2] payload 1 1
general protection fault: 0000 [#1] SMP
…
Call Trace:
 [] drm_dp_update_payload_part2+0xc2/0x130 [drm_kms_helper]
 [] intel_mst_enable_dp+0xf8/0x180 [i915]
 [] haswell_crtc_enable+0x3ed/0x8c0 [i915]
 [] intel_atomic_commit+0x5ad/0x1590 [i915]
 [] ? drm_atomic_set_crtc_for_connector+0x57/0xe0 [drm]
 [] drm_atomic_commit+0x37/0x60 [drm]
 [] drm_atomic_helper_set_config+0x7a/0xb0 [drm_kms_helper]
 [] drm_mode_set_config_internal+0x62/0x100 [drm]
 [] drm_mode_setcrtc+0x3cd/0x4e0 [drm]
 [] drm_ioctl+0x143/0x510 [drm]
 [] ? drm_mode_setplane+0x1b0/0x1b0 [drm]
 [] ? hrtimer_start_range_ns+0x1b7/0x3a0
 [] do_vfs_ioctl+0x92/0x570
 [] ? __sys_recvmsg+0x42/0x80
 [] SyS_ioctl+0x79/0x90
 [] entry_SYSCALL_64_fastpath+0x1a/0xa4
RIP  [] drm_dp_payload_send_msg+0x146/0x1f0 [drm_kms_helper]

Which occurs because of the hotplug event shown in the log, which ends
up causing DRM's dp helpers to drop the port we're updating the payload
on and panic.

CC: stable@vger.kernel.org
Signed-off-by: Lyude 
Reviewed-by: David Airlie 
Signed-off-by: Dave Airlie

Merge branch 'linux-4.6' of git://github.com/skeggsb/linux into drm-fixes

2016-04-21T23:53:07+00:00

Single nouveau regression fix
* 'linux-4.6' of git://github.com/skeggsb/linux:
  drm/nouveau/kms: fix setting of default values for dithering properties