<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Sep 25, 2023 at 11:40 AM CK Hu (胡俊光) <<a href="mailto:ck.hu@mediatek.com">ck.hu@mediatek.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi, Hubert:<br>
<br>
On Mon, 2023-09-25 at 09:22 +0000, Hubert Mazur wrote:<br>
> <br>
> External email : Please do not click links or open attachments until<br>
> you have verified the sender or the content.<br>
> The buffer size is derived from parameters supplied by the<br>
> userspace.<br>
> Having the size equal 0 causes allocation failure leading to kernel<br>
> panic.<br>
<br>
The size is calculated by width and height, and drm_mode_create_dumb()<br>
has checked the width and height, so the size would not be 0. So this<br>
patch is redundant.<br></blockquote><div> <br>Ah, you are right, I had an inner checkout which required this fix.<br>Let's abandon this patch.<br>Thanks for the review!<br>Regards,<br>Hubert<br><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Regards,<br>
CK<br>
<br>
> <br>
> Fix this by checking if size equals 0.<br>
> <br>
> Fixes: 119f5173628a ("drm/mediatek: Add DRM Driver for Mediatek SoC<br>
> MT8173.")<br>
> <br>
> Signed-off-by: Hubert Mazur <<a href="mailto:hmazur@chromium.org" target="_blank">hmazur@chromium.org</a>><br>
> ---<br>
> drivers/gpu/drm/mediatek/mtk_drm_gem.c | 5 +++++<br>
> 1 file changed, 5 insertions(+)<br>
> <br>
> diff --git a/drivers/gpu/drm/mediatek/mtk_drm_gem.c<br>
> b/drivers/gpu/drm/mediatek/mtk_drm_gem.c<br>
> index 9f364df52478..3b985b99d5c6 100644<br>
> --- a/drivers/gpu/drm/mediatek/mtk_drm_gem.c<br>
> +++ b/drivers/gpu/drm/mediatek/mtk_drm_gem.c<br>
> @@ -62,6 +62,11 @@ struct mtk_drm_gem_obj *mtk_drm_gem_create(struct<br>
> drm_device *dev,<br>
> struct drm_gem_object *obj;<br>
> int ret;<br>
> <br>
> + if (size == 0) {<br>
> + DRM_ERROR("Invalid allocation size: %zu", size);<br>
> + return ERR_PTR(-EINVAL);<br>
> + }<br>
> +<br>
> mtk_gem = mtk_drm_gem_init(dev, size);<br>
> if (IS_ERR(mtk_gem))<br>
> return ERR_CAST(mtk_gem);<br>
> -- <br>
> 2.42.0.515.g380fc7ccd1-goog<br>
</blockquote></div></div>