diff options
| author | Dave Airlie <airlied@redhat.com> | 2021-12-16 10:22:23 +1000 |
|---|---|---|
| committer | Dave Airlie <airlied@redhat.com> | 2021-12-16 10:22:34 +1000 |
| commit | c9f0322c46920c4c9abac5d7465be264eaabb717 (patch) | |
| tree | d5bcaa6e13c082e4950a1f6931b5104dd1525e2b | |
| parent | 2585cf9dfaaddf00b069673f27bb3f8530e2039c (diff) | |
| parent | 53b3495273282aa844c4613d19c3b30558c70c84 (diff) | |
Merge tag 'drm-intel-fixes-2021-12-15' of ssh://git.freedesktop.org/git/drm/drm-intel into drm-fixes
Fix a bound check in the DMC fw load.
Signed-off-by: Dave Airlie <airlied@redhat.com>
From: Rodrigo Vivi <rodrigo.vivi@intel.com>
Link: https://patchwork.freedesktop.org/patch/msgid/YbnGvnsX/H3rKAqO@intel.com
| -rw-r--r-- | drivers/gpu/drm/i915/display/intel_dmc.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/gpu/drm/i915/display/intel_dmc.c b/drivers/gpu/drm/i915/display/intel_dmc.c index 2dc9d632969d..aef69522f0be 100644 --- a/drivers/gpu/drm/i915/display/intel_dmc.c +++ b/drivers/gpu/drm/i915/display/intel_dmc.c @@ -596,7 +596,7 @@ static void parse_dmc_fw(struct drm_i915_private *dev_priv, continue; offset = readcount + dmc->dmc_info[id].dmc_offset * 4; - if (fw->size - offset < 0) { + if (offset > fw->size) { drm_err(&dev_priv->drm, "Reading beyond the fw_size\n"); continue; } |