summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEric Huang <jinhuieric.huang@amd.com>2026-06-17 14:42:48 -0400
committerAlex Deucher <alexander.deucher@amd.com>2026-07-01 11:39:29 -0400
commitaa7e29cf9a37092cf5057a612ee09f28df20258f (patch)
tree808e50028d1f1e24efd3ef9bf717d92f8dd7366b
parent6e03e0b1abc2338bd815a861c054434c6806a7b7 (diff)
downloadlinux-aa7e29cf9a37092cf5057a612ee09f28df20258f.tar.gz
linux-aa7e29cf9a37092cf5057a612ee09f28df20258f.zip
drm/amdkfd: add sanity check in svm_range_is_valid
to prevent svm range to be overflow or underflow. Signed-off-by: Eric Huang <jinhuieric.huang@amd.com> Reviewed-by: Philip Yang <philip.yang@amd.com> Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
-rw-r--r--drivers/gpu/drm/amd/amdkfd/kfd_svm.c8
1 files changed, 7 insertions, 1 deletions
diff --git a/drivers/gpu/drm/amd/amdkfd/kfd_svm.c b/drivers/gpu/drm/amd/amdkfd/kfd_svm.c
index 0900bb23349e..30ad10bbd47e 100644
--- a/drivers/gpu/drm/amd/amdkfd/kfd_svm.c
+++ b/drivers/gpu/drm/amd/amdkfd/kfd_svm.c
@@ -3473,7 +3473,13 @@ svm_range_is_valid(struct kfd_process *p, uint64_t start, uint64_t size)
unsigned long start_unchg = start;
start <<= PAGE_SHIFT;
- end = start + (size << PAGE_SHIFT);
+
+ if (size == 0)
+ return -EINVAL;
+
+ if (check_add_overflow(start, size << PAGE_SHIFT, &end))
+ return -EOVERFLOW;
+
do {
vma = vma_lookup(p->mm, start);
if (!vma || (vma->vm_flags & device_vma))