openbsd/src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2026-04-15 09:44:36 +00:00
Code Issues Projects Releases Wiki Activity

drm/amdgpu: validate doorbell_offset in user queue creation

Browse Source 
From Junrui Luo
3543005a42d7e8e12b21897ef6798541bf7cbcd3 in linux-6.18.y/6.18.22
a018d1819f158991b7308e4f74609c6c029b670c in mainline linux
This commit is contained in:
jsg
2026-04-12 23:14:28 +00:00
parent a8b9b58f9a
commit a2c2f33e08
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
sys/dev/pci/drm/amd/amdgpu/amdgpu_userq.c
View File

@@ -358,6 +358,13 @@ amdgpu_userq_get_doorbell_index(struct amdgpu_userq_mgr *uq_mgr,
goto unpin_bo;
}
/* Validate doorbell_offset is within the doorbell BO */
if ((u64)db_info->doorbell_offset * db_size + db_size >
amdgpu_bo_size(db_obj->obj)) {
r = -EINVAL;
goto unpin_bo;
}
index = amdgpu_doorbell_index_on_bar(uq_mgr->adev, db_obj->obj,
db_info->doorbell_offset, db_size);
drm_dbg_driver(adev_to_drm(uq_mgr->adev),