2011-02-18 11:53:14

by Jörg Otte

[permalink] [raw]
Subject: v2.6.38-rc5 drm:radeon regression

Reaching the desktop in v2.6.38-rc5 I only see the background.
No Icon,widgets,windows etc. I am under the impression
that everything is there - but invisible.

HW is Thinkpad T43 with Mobility Radeon X300 graphic.

Switching to the command line I see drm:radeon
displaying permanently :
drm:radeon_cs_ioctl error invalid command stream
drm:r100_cd_track_check no buffer for AA resolve buffer

I bisected the problem to:

fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit
commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
Author: Marek Olšák <[email protected]>
Date: Mon Feb 14 01:01:10 2011 +0100

drm/radeon/kms: check AA resolve registers on r300

This is an important security fix because we allowed arbitrary values
to be passed to AARESOLVE_OFFSET. This also puts the right buffer address
in the register.

Signed-off-by: Marek Olšák <[email protected]>
Signed-off-by: Dave Airlie <[email protected]>

:040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742
5b872a00532f36c0514790223375f1377a588501 M drivers


Attachments:
xorg-bad (44.76 kB)

2011-02-21 20:04:23

by Maciej Rutecki

[permalink] [raw]
Subject: Re: v2.6.38-rc5 drm:radeon regression

I created a Bugzilla entry at
https://bugzilla.kernel.org/show_bug.cgi?id=29632
for your bug report, please add your address to the CC list in there, thanks!

On piątek, 18 lutego 2011 o 12:47:56 Jörg Otte wrote:
> Reaching the desktop in v2.6.38-rc5 I only see the background.
> No Icon,widgets,windows etc. I am under the impression
> that everything is there - but invisible.
>
> HW is Thinkpad T43 with Mobility Radeon X300 graphic.
>
> Switching to the command line I see drm:radeon
> displaying permanently :
> drm:radeon_cs_ioctl error invalid command stream
> drm:r100_cd_track_check no buffer for AA resolve buffer
>
> I bisected the problem to:
>
> fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef is the first bad commit
> commit fff1ce4dc6113b6fdc4e3a815ca5fd229408f8ef
> Author: Marek Olšák <[email protected]>
> Date: Mon Feb 14 01:01:10 2011 +0100
>
> drm/radeon/kms: check AA resolve registers on r300
>
> This is an important security fix because we allowed arbitrary values
> to be passed to AARESOLVE_OFFSET. This also puts the right buffer
> address in the register.
>
> Signed-off-by: Marek Olšák <[email protected]>
> Signed-off-by: Dave Airlie <[email protected]>
>
> :040000 040000 c3a86a556f8c4ee1313bdc12e1f86cb44bacb742
>
> 5b872a00532f36c0514790223375f1377a588501 M drivers

--
Maciej Rutecki
http://www.maciek.unixy.pl