Skip to content

Commit fd617ea

Browse files
andmar-amdalexdeucher
authored andcommitted
drm/amdkfd: Fix NULL Pointer Dereference in KFD queue
Through KFD IOCTL Fuzzing we encountered a NULL pointer derefrence when calling kfd_queue_acquire_buffers. Fixes: 629568d ("drm/amdkfd: Validate queue cwsr area and eop buffer size") Signed-off-by: Andrew Martin <Andrew.Martin@amd.com> Reviewed-by: Philip Yang <Philip.Yang@amd.com> Signed-off-by: Andrew Martin <Andrew.Martin@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com> (cherry picked from commit 049e5bf) Cc: stable@vger.kernel.org
1 parent 374c9fa commit fd617ea

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

drivers/gpu/drm/amd/amdkfd/kfd_queue.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -266,8 +266,8 @@ int kfd_queue_acquire_buffers(struct kfd_process_device *pdd, struct queue_prope
266266
/* EOP buffer is not required for all ASICs */
267267
if (properties->eop_ring_buffer_address) {
268268
if (properties->eop_ring_buffer_size != topo_dev->node_props.eop_buffer_size) {
269-
pr_debug("queue eop bo size 0x%lx not equal to node eop buf size 0x%x\n",
270-
properties->eop_buf_bo->tbo.base.size,
269+
pr_debug("queue eop bo size 0x%x not equal to node eop buf size 0x%x\n",
270+
properties->eop_ring_buffer_size,
271271
topo_dev->node_props.eop_buffer_size);
272272
err = -EINVAL;
273273
goto out_err_unreserve;

0 commit comments

Comments
 (0)