drm/ast: Fixed CVE for DP501
authorKuoHsiang Chou <kuohsiang_chou@aspeedtech.com>
Wed, 21 Apr 2021 08:58:59 +0000 (16:58 +0800)
committerThomas Zimmermann <tzimmermann@suse.de>
Tue, 27 Apr 2021 12:12:34 +0000 (14:12 +0200)
commitba4e0339a6a33e2ba341703ce14ae8ca203cb2f1
treed979ba61d67466d8205a81b9e50789c41a641142
parent749da85a9a527c78f35cfa3f918a57644eb12908
drm/ast: Fixed CVE for DP501

[Bug][DP501]
If ASPEED P2A (PCI to AHB) bridge is disabled and disallowed for
CVE_2019_6260 item3, and then the monitor's EDID is unable read through
Parade DP501.
The reason is the DP501's FW is mapped to BMC addressing space rather
than Host addressing space.
The resolution is that using "pci_iomap_range()" maps to DP501's FW that
stored on the end of FB (Frame Buffer).
In this case, FrameBuffer reserves the last 2MB used for the image of
DP501.

Signed-off-by: KuoHsiang Chou <kuohsiang_chou@aspeedtech.com>
Reported-by: kernel test robot <lkp@intel.com>
Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Link: https://patchwork.freedesktop.org/patch/msgid/20210421085859.17761-1-kuohsiang_chou@aspeedtech.com
drivers/gpu/drm/ast/ast_dp501.c
drivers/gpu/drm/ast/ast_drv.h
drivers/gpu/drm/ast/ast_main.c