Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Harry Wentland 49c3da6596 drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info() ... [Why & How] gpio_bitshift is a uint8_t read directly from the VBIOS GPIO pin table. If the value is >= 32, the expression "1 << gpio_bitshift" triggers undefined behaviour in C (shift count exceeds type width). On x86 the shift is silently masked to 5 bits, producing an incorrect GPIO mask that may cause wrong MMIO register bits to be toggled. Validate gpio_bitshift before use and return BP_RESULT_BADBIOSTABLE for out-of-range values. Fixes: ae79c310b1 ("drm/amd/display: Add DCE12 bios parser support") Assisted-by: Copilot:claude-opus-4.6 Reviewed-by: Alex Hung <alex.hung@amd.com> Signed-off-by: Harry Wentland <harry.wentland@amd.com> Signed-off-by: Ray Wu <ray.wu@amd.com> Tested-by: Daniel Wheeler <daniel.wheeler@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com> (cherry picked from commit eadf438ab8) Cc: stable@vger.kernel.org		History 2026-06-03 14:45:02 -04:00
..
drm	drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()	2026-06-03 14:45:02 -04:00
host1x	gpu: host1x: convert MIPI to use operation function pointers	2026-03-19 08:18:36 +01:00
ipu-v3	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
nova-core	drm for v7.1-rc1	2026-04-15 08:45:00 -07:00
tests	gpu/tests/gpu_buddy: Add gpu_test_buddy_alloc_range for exact-range allocation	2026-03-09 13:58:12 +05:30
trace	gpu/trace: make TRACE_GPU_MEM configurable	2025-07-08 09:34:47 -07:00
vga	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
buddy.c	drm/buddy: Improve offset-aligned allocation handling	2026-03-09 12:36:10 +05:30
Kconfig	gpu: Move DRM buddy allocator one level up (part two)	2026-02-06 11:38:35 +10:00
Makefile	gpu: Fix uninitialized buddy for built-in drivers	2026-02-24 13:40:59 +10:00