diff options
| author | Asad Kamal <asad.kamal@amd.com> | 2026-06-23 00:00:00 +0000 |
|---|---|---|
| committer | Alex Deucher <alexander.deucher@amd.com> | 2026-07-01 11:25:52 -0400 |
| commit | f14f99fffce215f7bb4d3400193da01a43086c7b (patch) | |
| tree | 9df399b2786222029414dcb72b1907bca4b8b6b7 /tools/perf/scripts/python/stackcollapse.py | |
| parent | c42871ba4833855fb3ac1cdc586b3c5345d09e5d (diff) | |
drm/amdgpu/pm/powerplay: clamp Tonga/Polaris PP sub-table ucNumEntries
ucNumEntries in the Tonga/Polaris PowerPlay sub-tables is used as both the
kzalloc count and loop bound without validation, allowing a crafted VBIOS
to overflow the destination heap object and read past the VBIOS image.
Clamp via pp_entries_max() in get_vddc_lookup_table(),
get_mclk_voltage_dependency_table(), get_sclk_voltage_dependency_table()
and get_mm_clock_voltage_table().
Fixes: c82baa281843 ("drm/amd/powerplay: add Tonga dpm support (v3)")
Signed-off-by: Asad Kamal <asad.kamal@amd.com>
Reviewed-by: Lijo Lazar <lijo.lazar@amd.com>
Reviewed-by: Hawking Zhang <Hawking.Zhang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions