From: Jesse Zhang Date: Wed, 24 Apr 2024 09:10:46 +0000 (+0800) Subject: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc X-Git-Tag: v6.10-rc1~148^2~5^2~48 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=88a9a467c548d0b3c7761b4fd54a68e70f9c0944;p=thirdparty%2Fkernel%2Flinux.git drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian) Signed-off-by: Jesse Zhang Suggested-by: Christian König Reviewed-by: Christian König Signed-off-by: Alex Deucher --- diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c index 59acf424a078f..968ca2c84ef7e 100644 --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c @@ -743,7 +743,8 @@ int amdgpu_vce_ring_parse_cs(struct amdgpu_cs_parser *p, uint32_t created = 0; uint32_t allocated = 0; uint32_t tmp, handle = 0; - uint32_t *size = &tmp; + uint32_t dummy = 0xffffffff; + uint32_t *size = &dummy; unsigned int idx; int i, r = 0;