Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 866a9204 authored by Dan Carpenter's avatar Dan Carpenter Committed by Alex Deucher
Browse files

drm/radeon: fix underflow in r600_cp_dispatch_texture() 



The "if (pass_size > buf->total)" can underflow so I have changed the
type of size and pass_size to unsigned to avoid this problem.

Reviewed-by: default avatarChristian König <christian.koenig@amd.com>
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarAlex Deucher <alexander.deucher@amd.com>
parent 5e3c4f90

drivers/gpu/drm/radeon/r600_cp.c

+1 −1
Original line number Diff line number Diff line
@@ -2483,7 +2483,7 @@ int r600_cp_dispatch_texture(struct drm_device *dev, 
	struct drm_buf *buf;

	u32 *buffer;

	const u8 __user *data;

	int size, pass_size;

	unsigned int size, pass_size;

	u64 src_offset, dst_offset;



	if (!radeon_check_offset(dev_priv, tex->offset)) {