[lvc-project] [PATCH 6.1.y ] drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'

Vasiliy Kovalev kovalev at altlinux.org
Sat Oct 25 01:41:05 MSK 2025


On 10/24/25 23:52, Fedor Pchelkin wrote:
> On Wed, 22. Oct 04:30, Vasiliy Kovalev wrote:
>> @@ -1128,15 +1128,16 @@ static int amdgpu_discovery_reg_base_init(struct amdgpu_device *adev)
>>   				 *     0b10 : encode is disabled
>>   				 *     0b01 : decode is disabled
>>   				 */
>> -				adev->vcn.vcn_config[adev->vcn.num_vcn_inst] =
>> -					ip->revision & 0xc0;
>> -				ip->revision &= ~0xc0;
>> -				if (adev->vcn.num_vcn_inst < AMDGPU_MAX_VCN_INSTANCES)
>> +				if (adev->vcn.num_vcn_inst < AMDGPU_MAX_VCN_INSTANCES) {
>> +					adev->vcn.vcn_config[adev->vcn.num_vcn_inst] =
>> +						ip->revision & 0xc0;
>>   					adev->vcn.num_vcn_inst++;
>> +				}
>>   				else
>>   					dev_err(adev->dev, "Too many VCN instances: %d vs %d\n",
>>   						adev->vcn.num_vcn_inst + 1,
>>   						AMDGPU_MAX_VCN_INSTANCES);
> 
> else-ветке не хватает фигурных скобок для соответствия с if.  Минорно,
> но всё же.  При применении подправил.

Спасибо, отправил v2, добавив в cc lvc-project для отслеживания.

> 
>> +				ip->revision &= ~0xc0;
>>   			}
>>   			if (le16_to_cpu(ip->hw_id) == SDMA0_HWID ||
>>   			    le16_to_cpu(ip->hw_id) == SDMA1_HWID ||
>> -- 
>> 2.50.1



More information about the lvc-project mailing list