Commit c71dbd93 authored May 02, 2016 by Tom St Denis Committed by Alex Deucher Jul 07, 2016

drm/amd/amdgpu: ring debugfs is read in increments of 4 bytes



If a user tries to read a non-multiple of 4 bytes it would have
read until the end of the ring potentially crashing the user
task.

Signed-off-by: Tom St Denis <tom.stdenis@amd.com>
Reviewed-by: Christian König <christian.koenig@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>

parent 4f4824b5

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -383,7 +383,7 @@ static ssize_t amdgpu_debugfs_ring_read(struct file f, char __user buf,
		int r, i;
		uint32_t value, result, early[3];

		if (*pos & 3)
		if (*pos & 3 \|\| size & 3)
		return -EINVAL;

		result = 0;