Commit 5265f033 authored Jun 20, 2018 by Mikko Perttunen Committed by Thierry Reding Jul 09, 2018

drm/tegra: Fix comparison operator for buffer size



Here we are checking for the buffer length, not an offset for writing
to, so using > is correct. The current code incorrectly rejects a
command buffer ending at the memory buffer's end.

Signed-off-by: Mikko Perttunen <mperttunen@nvidia.com>
Reviewed-by: Dmitry Osipenko <digetx@gmail.com>
Signed-off-by: Thierry Reding <treding@nvidia.com>

parent ec589232

drivers/gpu/drm/tegra/drm.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -398,7 +398,7 @@ int tegra_drm_submit(struct tegra_drm_context *context,
		* unaligned offset is malformed and cause commands stream
		* corruption on the buffer address relocation.
		*/
		if (offset & 3 \|\| offset >= obj->gem.size) {
		if (offset & 3 \|\| offset > obj->gem.size) {
		err = -EINVAL;
		goto fail;
		}