linux-next.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Coverity: submit_dmub_burst_write(): Memory - corruptions
@ 2019-11-12  1:35 coverity-bot
  0 siblings, 0 replies; only message in thread
From: coverity-bot @ 2019-11-12  1:35 UTC (permalink / raw)
  To: Nicholas Kazlauskas
  Cc: Alex Deucher, Harry Wentland, Hersen Wu, Gustavo A. R. Silva, linux-next

Hello!

This is an experimental automated report about issues detected by Coverity
from a scan of next-20191108 as part of the linux-next weekly scan project:
https://scan.coverity.com/projects/linux-next-weekly-scan

You're getting this email because you were associated with the identified
lines of code (noted below) that were touched by recent commits:

c264644545d2 ("drm/amd/display: Add DMUB support to DC")

Coverity reported the following:

*** CID 1487839:  Memory - corruptions  (OVERRUN)
/drivers/gpu/drm/amd/display/dc/dc_helper.c: 76 in submit_dmub_burst_write()
70     	cmd_buf->header.payload_bytes =
71     			sizeof(uint32_t) * offload->reg_seq_count;
72
73     	gather = ctx->dmub_srv->reg_helper_offload.gather_in_progress;
74     	ctx->dmub_srv->reg_helper_offload.gather_in_progress = false;
75
vvv     CID 1487839:  Memory - corruptions  (OVERRUN)
vvv     Overrunning struct type dmub_cmd_header of 4 bytes by passing it to a function which accesses it at byte offset 63.
76     	dc_dmub_srv_cmd_queue(ctx->dmub_srv, &cmd_buf->header);
77
78     	ctx->dmub_srv->reg_helper_offload.gather_in_progress = gather;
79
80     	memset(cmd_buf, 0, sizeof(*cmd_buf));
81

If this is a false positive, please let us know so we can mark it as
such, or teach the Coverity rules to be smarter. If not, please make
sure fixes get into linux-next. :) For patches fixing this, please
include these lines (but double-check the "Fixes" first):

Reported-by: coverity-bot <keescook+coverity-bot@chromium.org>
Addresses-Coverity-ID: 1487839 ("Memory - corruptions")
Fixes: c264644545d2 ("drm/amd/display: Add DMUB support to DC")


Thanks for your attention!

-- 
Coverity-bot

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2019-11-12  1:35 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-11-12  1:35 Coverity: submit_dmub_burst_write(): Memory - corruptions coverity-bot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).