Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f9df487e authored by Kaushal Sanadhya's avatar Kaushal Sanadhya Committed by Sumangala P
Browse files

msm: kgsl: Limit the syncpoint count for AUX commands 



KGSL internally has a limit on the length of the list of syncpoints
submitted in a single AUX command. Enforce this limit so we don't
overwrite memory beyond the structures that track these syncpoints.

Change-Id: I261bfd4f786ff7e4fbe07e8bca9e9b8d8b87c950
Signed-off-by: default avatarLynus Vaz <quic_lvaz@quicinc.com>
Signed-off-by: default avatarKaushal Sanadhya <quic_ksanadhy@quicinc.com>
parent db09abd6

drivers/gpu/msm/kgsl.c

+4 −0
Original line number Diff line number Diff line
@@ -2129,6 +2129,10 @@ long kgsl_ioctl_gpu_aux_command(struct kgsl_device_private *dev_priv, 
	if (!(param->flags & KGSL_GPU_AUX_COMMAND_TIMELINE))

		return -EINVAL;



	if ((param->flags & KGSL_GPU_AUX_COMMAND_SYNC) &&

		(param->numsyncs > KGSL_MAX_SYNCPOINTS))

		return -EINVAL;



	context = kgsl_context_get_owner(dev_priv, param->context_id);

	if (!context)

		return -EINVAL;