Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 695daf1a authored by Leo Liu's avatar Leo Liu Committed by Christian König
Browse files

drm/radeon: check buffer relocation offset 



Signed-off-by: default avatarLeo Liu <leo.liu@amd.com>
Signed-off-by: default avatarChristian König <christian.koenig@amd.com>
Cc: stable@vger.kernel.org
parent f5d636d2

drivers/gpu/drm/radeon/radeon_uvd.c

+4 −0
Original line number Diff line number Diff line
@@ -465,6 +465,10 @@ static int radeon_uvd_cs_reloc(struct radeon_cs_parser *p, 
	cmd = radeon_get_ib_value(p, p->idx) >> 1;



	if (cmd < 0x4) {

		if (end <= start) {

			DRM_ERROR("invalid reloc offset %X!\n", offset);

			return -EINVAL;

		}

		if ((end - start) < buf_sizes[cmd]) {

			DRM_ERROR("buffer (%d) to small (%d / %d)!\n", cmd,

				  (unsigned)(end - start), buf_sizes[cmd]);