nv-tegra-mirror/linux-nv-oot
1
0
Fork 0
mirror of git://nv-tegra.nvidia.com/linux-nv-oot.git synced 2025-12-24 10:11:26 +03:00
Code Issues Packages Projects Releases Wiki Activity

video: tegra: nvmap: Fix INT30-C overflow defects

Browse Source 
Adding check for multiplication overflow and return error in case of
overflow condition.

No. of defects fixed - 4 INT30-C and INT 08-C.

JIRA: TMM-5724
Bug 4479044

Change-Id: I00d4a65787a2c516f5c2c410729dfc2a89f65e25
Signed-off-by: Surbhi Singh <surbhis@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3258030
GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
Reviewed-by: Sachin Nikam <snikam@nvidia.com>
Reviewed-by: Ketan Patil <ketanp@nvidia.com>
Reviewed-by: N V S Abhishek <nabhishek@nvidia.com>
This commit is contained in:
Surbhi Singh
2024-11-27 08:41:37 +00:00
committed by Jon Hunter
parent 447103907c
commit 1ab9257209
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
drivers/video/tegra/nvmap/nvmap_pp.c
View File

@@ -477,6 +477,10 @@ u32 nvmap_page_pool_fill_lots(struct nvmap_page_pool *pool,
save_to_zero = pool->to_zero;
BUG_ON(pool->max < pool->count);
BUG_ON(pool->max - pool->count < pool->to_zero);
BUG_ON(pool->max - pool->count - pool->to_zero < pool->under_zero);
ret = min(nr, pool->max - pool->count - pool->to_zero - pool->under_zero);
for (i = 0; i < ret; i++) {
@@ -744,6 +748,7 @@ int nvmap_page_pool_init(struct nvmap_device *dev)
{
struct sysinfo info;
struct nvmap_page_pool *pool;
unsigned long result;
dev->pool = kzalloc(sizeof(*dev->pool), GFP_KERNEL);
if (dev->pool == NULL)
@@ -764,10 +769,15 @@ int nvmap_page_pool_init(struct nvmap_device *dev)
si_meminfo(&info);
pr_info("Total RAM pages: %lu\n", info.totalram);
if (!NVMAP_CONFIG_PAGE_POOL_SIZE)
if (!NVMAP_CONFIG_PAGE_POOL_SIZE) {
/* The ratio is pool pages per 1K ram pages.
* So, the >> 10 */
pool->max = (info.totalram * NVMAP_PP_POOL_SIZE) >> 10;
if (check_mul_overflow(info.totalram, (unsigned long)NVMAP_PP_POOL_SIZE, &result))
goto fail;
pool->max = (result) >> 10;
}
else
pool->max = NVMAP_CONFIG_PAGE_POOL_SIZE;