drm/amdkfd: Use memdup_array_user to copy data from/to user space at kfd ioctls

Browse source

Several kfd ioctls need transfer array data from/to user space. Kfd driver
uses kmalloc_array with user provided size. That can oversize alloc or 32-bit
wrap with hostile value. Replace it by memdup_array_user that does overflow
checking and allocates through dedicated slab caches, also physical continuous
as kmalloc.

Signed-off-by: Xiaogang Chen <xiaogang.chen@amd.com>
Reviewed-by: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit 4eca4742eb)

...

This commit is contained in:

Xiaogang Chen 2026-06-16 13:25:56 -05:00 • committed by Alex Deucher

parent 516bf737a5

commit 2321831d7e

1 changed files with 12 additions and 34 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

46

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

View file