]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/amdgpu: Add bounds checking to ib_{get,set}_value
authorBenjamin Cheng <benjamin.cheng@amd.com>
Wed, 25 Mar 2026 12:39:19 +0000 (08:39 -0400)
committerAlex Deucher <alexander.deucher@amd.com>
Fri, 3 Apr 2026 17:48:10 +0000 (13:48 -0400)
commit66085e206431ef88ce36f53c1f53d570790ccc9e
tree40f1adf039ce1369444e0bd3fe69d77cf4286624
parent4e8197426f8f10a9afc9a50fc2970b733ed22d85
drm/amdgpu: Add bounds checking to ib_{get,set}_value

The uvd/vce/vcn code accesses the IB at predefined offsets without
checking that the IB is large enough. Check the bounds here. The caller
is responsible for making sure it can handle arbitrary return values.

Also make the idx a uint32_t to prevent overflows causing the condition
to fail.

Signed-off-by: Benjamin Cheng <benjamin.cheng@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Reviewed-by: Ruijing Dong <ruijing.dong@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Cc: stable@vger.kernel.org
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.h