Commit 866a9204 authored by Dan Carpenter's avatar Dan Carpenter Committed by Alex Deucher

drm/radeon: fix underflow in r600_cp_dispatch_texture()

The "if (pass_size > buf->total)" can underflow so I have changed the
type of size and pass_size to unsigned to avoid this problem.
Reviewed-by: default avatarChristian König <christian.koenig@amd.com>
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: default avatarAlex Deucher <alexander.deucher@amd.com>
parent 5e3c4f90
...@@ -2483,7 +2483,7 @@ int r600_cp_dispatch_texture(struct drm_device *dev, ...@@ -2483,7 +2483,7 @@ int r600_cp_dispatch_texture(struct drm_device *dev,
struct drm_buf *buf; struct drm_buf *buf;
u32 *buffer; u32 *buffer;
const u8 __user *data; const u8 __user *data;
int size, pass_size; unsigned int size, pass_size;
u64 src_offset, dst_offset; u64 src_offset, dst_offset;
if (!radeon_check_offset(dev_priv, tex->offset)) { if (!radeon_check_offset(dev_priv, tex->offset)) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment