diff options
| author | Deepak Nibade <dnibade@nvidia.com> | 2014-04-01 12:14:50 +0530 |
|---|---|---|
| committer | Terje Bergstrom <tbergstrom@nvidia.com> | 2014-04-07 02:40:20 -0700 |
| commit | 66a3430f1785c40f7822087a8b5410ae3075829c (patch) | |
| tree | c2c70c1f374c39eae831f645095c3057f58e72cf /drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c | |
| parent | c669750fadb752b7680de2db59a8c07735e712ab (diff) | |
gpu: nvgpu: gk20a: add syncpt id checks
add valid syncpt id checks when syncpt id is
extracted from fence fd
Bug 1448825
Change-Id: I0f1722aad60e7644b8f490f24cf18a3b80f8583c
Signed-off-by: Deepak Nibade <dnibade@nvidia.com>
Reviewed-on: http://git-master/r/390572
Reviewed-by: Terje Bergstrom <tbergstrom@nvidia.com>
Diffstat (limited to 'drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c')
| -rw-r--r-- | drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c b/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c index 291036db93a9..851ae18b31bd 100644 --- a/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c +++ b/drivers/gpu/nvgpu/gk20a/channel_sync_gk20a.c @@ -119,6 +119,16 @@ int gk20a_channel_syncpt_wait_fd(struct gk20a_channel_sync *s, int fd, if (!sync_fence) return -EINVAL; + /* validate syncpt ids */ + list_for_each_entry(pt, &sync_fence->pt_list_head, pt_list) { + u32 wait_id = nvhost_sync_pt_id(pt); + if (!wait_id || + wait_id >= nvhost_syncpt_nb_pts_ext(sp->host1x_pdev)) { + sync_fence_put(sync_fence); + return -EINVAL; + } + } + num_wait_cmds = nvhost_sync_num_pts(sync_fence); gk20a_channel_alloc_priv_cmdbuf(c, 4 * num_wait_cmds, &wait_cmd); if (wait_cmd == NULL) { |