aboutsummaryrefslogtreecommitdiffstats
path: root/drivers/gpu/drm/drm_vblank.c
diff options
context:
space:
mode:
authorChristian König <[email protected]>2023-08-25 13:28:00 +0000
committerAlex Deucher <[email protected]>2023-08-31 20:39:28 +0000
commita5492fe27ff9684d901b2829584ea186fbecd71e (patch)
tree40e516dc835203ce7ead2105627e4177caee516a /drivers/gpu/drm/drm_vblank.c
parentdrm/amdgpu: revise the device initialization sequences (diff)
downloadkernel-a5492fe27ff9684d901b2829584ea186fbecd71e.tar.gz
kernel-a5492fe27ff9684d901b2829584ea186fbecd71e.zip
drm/amdgpu: fix amdgpu_cs_p1_user_fence
The offset is just 32bits here so this can potentially overflow if somebody specifies a large value. Instead reduce the size to calculate the last possible offset. The error handling path incorrectly drops the reference to the user fence BO resulting in potential reference count underflow. Signed-off-by: Christian König <[email protected]> Reviewed-by: Alex Deucher <[email protected]> Signed-off-by: Alex Deucher <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/drm_vblank.c')
0 files changed, 0 insertions, 0 deletions