All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH] drm/amdkfd: dqm fence memory corruption
@ 2021-01-27 12:33 ` Qu Huang
  0 siblings, 0 replies; 12+ messages in thread
From: Qu Huang @ 2021-01-27 12:33 UTC (permalink / raw)
  To: Felix.Kuehling
  Cc: alexander.deucher, christian.koenig, airlied, daniel, amd-gfx,
	dri-devel, linux-kernel, Qu Huang

Amdgpu driver uses 4-byte data type as DQM fence memory,
and transmits GPU address of fence memory to microcode
through query status PM4 message. However, query status
PM4 message definition and microcode processing are all
processed according to 8 bytes. Fence memory only allocates
4 bytes of memory, but microcode does write 8 bytes of memory,
so there is a memory corruption.

Signed-off-by: Qu Huang <jinsdb@126.com>
---
 drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c b/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c
index e686ce2..8b38d0c 100644
--- a/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c
+++ b/drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c
@@ -1161,7 +1161,7 @@ static int start_cpsch(struct device_queue_manager *dqm)
 	pr_debug("Allocating fence memory\n");
 
 	/* allocate fence memory on the gart */
-	retval = kfd_gtt_sa_allocate(dqm->dev, sizeof(*dqm->fence_addr),
+	retval = kfd_gtt_sa_allocate(dqm->dev, sizeof(uint64_t),
 					&dqm->fence_mem);
 
 	if (retval)
-- 
1.8.3.1


^ permalink raw reply related	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2021-03-26 19:24 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-27 12:33 [PATCH] drm/amdkfd: dqm fence memory corruption Qu Huang
2021-01-27 12:33 ` Qu Huang
2021-01-27 12:33 ` Qu Huang
2021-01-27 21:50 ` Felix Kuehling
2021-01-27 21:50   ` Felix Kuehling
2021-01-27 21:50   ` Felix Kuehling
2021-03-26  9:38   ` Qu Huang
2021-03-26  9:38     ` Qu Huang
2021-03-26  9:38     ` Qu Huang
2021-03-26 19:23     ` Felix Kuehling
2021-03-26 19:23       ` Felix Kuehling
2021-03-26 19:23       ` Felix Kuehling

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.