Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel
os
linux
drm/amdgpu/mmhub3.0.1: add bounds checking for cid
The value should never exceed the array size as those
are the only values the hardware is expected to return,
but add checks anyway.
Reviewed-by: Benjamin Cheng <benjamin.cheng@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit 5f76083183363c4528a4aaa593f5d38c28fe7d7b)
Cc: stable@vger.kernel.org
+2
-1
+2
-1
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c
+2
-1
drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c
···
117
117
118
118
switch (amdgpu_ip_version(adev, MMHUB_HWIP, 0)) {
119
119
case IP_VERSION(3, 0, 1):
120
-
mmhub_cid = mmhub_client_ids_v3_0_1[cid][rw];
120
+
mmhub_cid = cid < ARRAY_SIZE(mmhub_client_ids_v3_0_1) ?
121
+
mmhub_client_ids_v3_0_1[cid][rw] : NULL;
121
122
break;
122
123
default:
123
124
mmhub_cid = NULL;