]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
drm/amdgpu: validate fence_count in wait_fences ioctl
authorJesse.Zhang <Jesse.Zhang@amd.com>
Fri, 13 Mar 2026 05:12:33 +0000 (13:12 +0800)
committerAlex Deucher <alexander.deucher@amd.com>
Tue, 17 Mar 2026 14:45:30 +0000 (10:45 -0400)
commit2cef848812a071991c20090cbe051a0a96c50a0c
tree18e4610aa0d35f0e91df52afd586f4ac3fb14421
parent4bbba79a7f1d0c7296bf8c935d65a9ff633f6917
drm/amdgpu: validate fence_count in wait_fences ioctl

Add an early parameter check in amdgpu_cs_wait_fences_ioctl() to reject
a zero fence_count with -EINVAL.

dma_fence_wait_any_timeout() requires count > 0. When userspace passes
fence_count == 0, the call propagates down to dma_fence core which does
not expect a zero-length array and triggers a WARN_ON.

Return -EINVAL immediately so the caller gets a clear error instead of
hitting an unexpected warning in the DMA fence subsystem.

No functional change for well-formed userspace callers.

v2:
- Reworked commit message to clarify the parameter validation rationale
- Removed verbose crash log from commit description
- Simplified inline code comment

Reviewed-by: Vitaly Prosyak <vitaly.prosyak@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Jesse Zhang <jesse.zhang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c