[PATCH v2] drm/tegra: Check size of a submitted command buffer

Dmitry Osipenko digetx at gmail.com
Sun May 14 20:55:35 UTC 2017


On 12.05.2017 22:29, Dmitry Osipenko wrote:
> If command buffer claims a number of words that is higher than its BO can
> fit and a relocation lays past the BO, a kernel OOPS will be fired on that
> relocation address patching. This was triggered by an opentegra Xorg driver
> that erroneously pushed too many commands to the pushbuf.
> 

For the record, this patch is superseded by the "drm/tegra: Check offsets of a
submitted command buffer and of relocations."

-- 
Dmitry


More information about the dri-devel mailing list