src/sys/dev/drm, branch release/12.3.0

drm: Update deprecation message

2020-09-06T11:23:58Z

Update the deprecation message in the drm1 (aka legacy drm or drm-legacy) drivers to not point towards the drm-legacy-kmod port, as that is being deprecated. This is a direct commit to stable/12 since the drm1 code has been removed from 13 already. Reviewed by: imp Approved by: imp Differential Revision: https://reviews.freebsd.org/D26175

MFC r343060:

2019-02-03T14:56:38Z

[drm] Fix off-by-one error when accessing driver-specific ioctl handlers array PR: 231513 Submitted by: Young_X Approved by: imp

Add big, nasty abandonware tags to this code.

2018-08-28T14:46:55Z

This code works for some people, but hasn't been updated in a long time. Still allow people to use this code for the moment, but put a big, nasty obsolete message to inform and encourage people to move to the port. Approved by: re@ (gjb) Differential Review: https://reviews.freebsd.org/D16894

Eliminate the arena parameter to kmem_free(). Implicitly this corrects an

2018-08-25T19:38:08Z

error in the function hypercall_memfree(), where the wrong arena was being passed to kmem_free(). Introduce a per-page flag, VPO_KMEM_EXEC, to mark physical pages that are mapped in kmem with execute permissions. Use this flag to determine which arena the kmem virtual addresses are returned to. Eliminate UMA_SLAB_KRWX. The introduction of VPO_KMEM_EXEC makes it redundant. Update the nearby comment for UMA_SLAB_KERNEL. Reviewed by: kib, markj Discussed with: jeff Approved by: re (marius) Differential Revision: https://reviews.freebsd.org/D16845

Revert drm2 removal.

2018-08-24T00:02:00Z

Revert r338177, r338176, r338175, r338174, r338172 After long consultations with re@, core members and mmacy, revert these changes. Followup changes will be made to mark them as deprecated and prent a message about where to find the up-to-date driver. Followup commits will be made to make this clear in the installer. Followup commits to reduce POLA in ways we're still exploring. It's anticipated that after the freeze, this will be removed in 13-current (with the residual of the drm2 code copied to sys/arm/dev/drm2 for the TEGRA port's use w/o the intel or radeon drivers). Due to the impending freeze, there was no formal core vote for this. I've been talking to different core members all day, as well as Matt Macey and Glen Barber. Nobody is completely happy, all are grudgingly going along with this. Work is in progress to mitigate the negative effects as much as possible. Requested by: re@ (gjb, rgrimes)

Remove legacy drm and drm2 from tree

2018-08-22T01:50:12Z

As discussed on the MLs drm2 conflicts with the ports' version and there is no upstream for most if not all of drm. Both have been merged in to a single port. Users on powerpc, 32-bit hardware, or with GPUs predating Radeon and i915 will need to install the graphics/drm-legacy-kmod. All other users should be able to use one of the LinuxKPI-based ports: graphics/drm-stable-kmod, graphics/drm-next-kmod, graphics/drm-devel-kmod. MFC: never Approved by: core@

Eliminate the unused arena parameter from kmem_alloc_attr().

2018-08-18T22:07:48Z

Reviewed by: kib, markj Differential Revision: https://reviews.freebsd.org/D16793

drm: fix memory leak on error path

2018-05-28T02:34:38Z

Reported by: Coverity CID: 1368753 MFC after: 3 days Sponsored by: Dell EMC

Correct signedness bug in drm_modeset_ctl

2018-03-22T01:00:55Z

drm_modeset_ctl() takes a signed in from userland, does a boundscheck, and then uses it to index into a structure and write to it. The boundscheck only checks upper bound, and never checks for nagative values. If the int coming from userland is negative [after conversion] it will bypass the boundscheck, perform a negative index into an array and write to it, causing memory corruption. Note that this is in the "old" drm driver; this issue does not exist in drm2. Reported by: Ilja Van Sprundel Reviewed by: cem MFC after: 1 day Sponsored by: The FreeBSD Foundation

Fix kernel memory disclosure in drm_infobufs

2018-03-21T23:51:14Z

drm_infobufs() has a structure on the stack, fills it out and copies it to userland. There are 2 elements in the struct that are not filled out and left uninitialized. This will leak uninitialized kernel stack data to userland. Submitted by: Domagoj Stolfa Reported by: Ilja Van Sprundel MFC after: 1 day Security: Kernel memory disclosure (798)