drm/v3d: Don't allow two multisync extensions in the same job
Currently, two multisync extensions can be added to the same job and only the last multisync extension will be used. To avoid this vulnerability, don't allow two multisync extensions in the same job. Signed-off-by: Maíra Canal <mcanal@igalia.com> Reviewed-by: Iago Toral Quiroga <itoral@igalia.com> Link: https://patchwork.freedesktop.org/patch/msgid/20231130164420.932823-7-mcanal@igalia.com
This commit is contained in:
@@ -329,6 +329,11 @@ v3d_get_multisync_submit_deps(struct drm_file *file_priv,
|
||||
struct v3d_submit_ext *se = data;
|
||||
int ret;
|
||||
|
||||
if (se->in_sync_count || se->out_sync_count) {
|
||||
DRM_DEBUG("Two multisync extensions were added to the same job.");
|
||||
return -EINVAL;
|
||||
}
|
||||
|
||||
if (copy_from_user(&multisync, ext, sizeof(multisync)))
|
||||
return -EFAULT;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user