Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
drm/amdgpu/mmhub4.1.0: add bounds checking for cid
The value should never exceed the array size as those
are the only values the hardware is expected to return,
but add checks anyway.
Reviewed-by: Benjamin Cheng <benjamin.cheng@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit 04f063d85090f5dd0c671010ce88ee49d9dcc8ed)
Cc: stable@vger.kernel.org
+2
-1
+2
-1
drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c
+2
-1
drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c
···
102
102
status);
103
103
switch (amdgpu_ip_version(adev, MMHUB_HWIP, 0)) {
104
104
case IP_VERSION(4, 1, 0):
105
-
mmhub_cid = mmhub_client_ids_v4_1_0[cid][rw];
105
+
mmhub_cid = cid < ARRAY_SIZE(mmhub_client_ids_v4_1_0) ?
106
+
mmhub_client_ids_v4_1_0[cid][rw] : NULL;
106
107
break;
107
108
default:
108
109
mmhub_cid = NULL;