From: Tvrtko Ursulin Date: Fri, 5 Dec 2025 13:40:30 +0000 (+0000) Subject: drm/amdgpu/userq: Use memdup_array_user in amdgpu_userq_signal_ioctl X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5eb2a72bac35e8eddc36d4a614b3fb976457bfbc;p=thirdparty%2Fkernel%2Flinux.git drm/amdgpu/userq: Use memdup_array_user in amdgpu_userq_signal_ioctl Use the existing helper instead of multiplying the size. Signed-off-by: Tvrtko Ursulin Reviewed-by: Sunil Khatri Signed-off-by: Alex Deucher --- diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c index 506aaae0f897e..d43b0ebaf8627 100644 --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c @@ -479,8 +479,8 @@ int amdgpu_userq_signal_ioctl(struct drm_device *dev, void *data, return -ENOTSUPP; num_syncobj_handles = args->num_syncobj_handles; - syncobj_handles = memdup_user(u64_to_user_ptr(args->syncobj_handles), - size_mul(sizeof(u32), num_syncobj_handles)); + syncobj_handles = memdup_array_user(u64_to_user_ptr(args->syncobj_handles), + num_syncobj_handles, sizeof(u32)); if (IS_ERR(syncobj_handles)) return PTR_ERR(syncobj_handles);