diff options
author | Nicolai Stange <nicstange@gmail.com> | 2016-03-22 17:05:27 -0400 |
---|---|---|
committer | Alex Deucher <alexander.deucher@amd.com> | 2016-05-02 15:25:40 -0400 |
commit | b2c0cbd657173f024138d6421774007690ceeffd (patch) | |
tree | 6890bbf35fee17fbafd77789e91689a5116b8927 | |
parent | 70f0f5fbcfbe26246ac2f0687d6fb1ac9dd95f44 (diff) |
drm/radeon: don't include RADEON_HPD_NONE in HPD IRQ enable bitsets
The values of all but the RADEON_HPD_NONE members of the radeon_hpd_id
enum transform 1:1 into bit positions within the 'enabled' bitset as
assembled by evergreen_hpd_init():
enabled |= 1 << radeon_connector->hpd.hpd;
However, if ->hpd.hpd happens to equal RADEON_HPD_NONE == 0xff, UBSAN
reports
UBSAN: Undefined behaviour in drivers/gpu/drm/radeon/evergreen.c:1867:16
shift exponent 255 is too large for 32-bit type 'int'
[...]
Call Trace:
[<ffffffff818c4d35>] dump_stack+0xbc/0x117
[<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
[<ffffffff819411bb>] ubsan_epilogue+0xd/0x4e
[<ffffffff81941cbc>] __ubsan_handle_shift_out_of_bounds+0x1fb/0x254
[<ffffffffa0ba7f2e>] ? atom_execute_table+0x3e/0x50 [radeon]
[<ffffffff81941ac1>] ? __ubsan_handle_load_invalid_value+0x158/0x158
[<ffffffffa0b87700>] ? radeon_get_pll_use_mask+0x130/0x130 [radeon]
[<ffffffff81219930>] ? wake_up_klogd_work_func+0x60/0x60
[<ffffffff8121a35e>] ? vprintk_default+0x3e/0x60
[<ffffffffa0c603c4>] evergreen_hpd_init+0x274/0x2d0 [radeon]
[<ffffffffa0c603c4>] ? evergreen_hpd_init+0x274/0x2d0 [radeon]
[<ffffffffa0bd196e>] radeon_modeset_init+0x8ce/0x18d0 [radeon]
[<ffffffffa0b71d86>] radeon_driver_load_kms+0x186/0x350 [radeon]
[<ffffffffa03b6b16>] drm_dev_register+0xc6/0x100 [drm]
[<ffffffffa03bc8c4>] drm_get_pci_dev+0xe4/0x490 [drm]
[<ffffffff814b83f0>] ? kfree+0x220/0x370
[<ffffffffa0b687c2>] radeon_pci_probe+0x112/0x140 [radeon]
[...]
=====================================================================
radeon 0000:01:00.0: No connectors reported connected with modes
At least on x86, there should be no user-visible impact as there
1 << 0xff == 1 << (0xff & 31) == 1 << 31
holds and 31 > RADEON_MAX_HPD_PINS. Thus, this patch is a cosmetic one.
All of the above applies analogously to evergreen_hpd_fini(),
r100_hpd_init(), r100_hpd_fini(), r600_hpd_init(), r600_hpd_fini(),
rs600_hpd_init() and rs600_hpd_fini()
Silence UBSAN by checking ->hpd.hpd for RADEON_HPD_NONE before oring it
into the 'enabled' bitset in the *_init()- or the 'disabled' bitset in
the *_fini()-functions respectively.
Signed-off-by: Nicolai Stange <nicstange@gmail.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
-rw-r--r-- | drivers/gpu/drm/radeon/evergreen.c | 6 | ||||
-rw-r--r-- | drivers/gpu/drm/radeon/r100.c | 6 | ||||
-rw-r--r-- | drivers/gpu/drm/radeon/r600.c | 6 | ||||
-rw-r--r-- | drivers/gpu/drm/radeon/rs600.c | 6 |
4 files changed, 16 insertions, 8 deletions
diff --git a/drivers/gpu/drm/radeon/evergreen.c b/drivers/gpu/drm/radeon/evergreen.c index e483b0752866..501633be8ea2 100644 --- a/drivers/gpu/drm/radeon/evergreen.c +++ b/drivers/gpu/drm/radeon/evergreen.c | |||
@@ -1864,7 +1864,8 @@ void evergreen_hpd_init(struct radeon_device *rdev) | |||
1864 | break; | 1864 | break; |
1865 | } | 1865 | } |
1866 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); | 1866 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); |
1867 | enabled |= 1 << radeon_connector->hpd.hpd; | 1867 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
1868 | enabled |= 1 << radeon_connector->hpd.hpd; | ||
1868 | } | 1869 | } |
1869 | radeon_irq_kms_enable_hpd(rdev, enabled); | 1870 | radeon_irq_kms_enable_hpd(rdev, enabled); |
1870 | } | 1871 | } |
@@ -1907,7 +1908,8 @@ void evergreen_hpd_fini(struct radeon_device *rdev) | |||
1907 | default: | 1908 | default: |
1908 | break; | 1909 | break; |
1909 | } | 1910 | } |
1910 | disabled |= 1 << radeon_connector->hpd.hpd; | 1911 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
1912 | disabled |= 1 << radeon_connector->hpd.hpd; | ||
1911 | } | 1913 | } |
1912 | radeon_irq_kms_disable_hpd(rdev, disabled); | 1914 | radeon_irq_kms_disable_hpd(rdev, disabled); |
1913 | } | 1915 | } |
diff --git a/drivers/gpu/drm/radeon/r100.c b/drivers/gpu/drm/radeon/r100.c index bbdf15fc9153..af985b951d00 100644 --- a/drivers/gpu/drm/radeon/r100.c +++ b/drivers/gpu/drm/radeon/r100.c | |||
@@ -592,7 +592,8 @@ void r100_hpd_init(struct radeon_device *rdev) | |||
592 | 592 | ||
593 | list_for_each_entry(connector, &dev->mode_config.connector_list, head) { | 593 | list_for_each_entry(connector, &dev->mode_config.connector_list, head) { |
594 | struct radeon_connector *radeon_connector = to_radeon_connector(connector); | 594 | struct radeon_connector *radeon_connector = to_radeon_connector(connector); |
595 | enable |= 1 << radeon_connector->hpd.hpd; | 595 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
596 | enable |= 1 << radeon_connector->hpd.hpd; | ||
596 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); | 597 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); |
597 | } | 598 | } |
598 | radeon_irq_kms_enable_hpd(rdev, enable); | 599 | radeon_irq_kms_enable_hpd(rdev, enable); |
@@ -614,7 +615,8 @@ void r100_hpd_fini(struct radeon_device *rdev) | |||
614 | 615 | ||
615 | list_for_each_entry(connector, &dev->mode_config.connector_list, head) { | 616 | list_for_each_entry(connector, &dev->mode_config.connector_list, head) { |
616 | struct radeon_connector *radeon_connector = to_radeon_connector(connector); | 617 | struct radeon_connector *radeon_connector = to_radeon_connector(connector); |
617 | disable |= 1 << radeon_connector->hpd.hpd; | 618 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
619 | disable |= 1 << radeon_connector->hpd.hpd; | ||
618 | } | 620 | } |
619 | radeon_irq_kms_disable_hpd(rdev, disable); | 621 | radeon_irq_kms_disable_hpd(rdev, disable); |
620 | } | 622 | } |
diff --git a/drivers/gpu/drm/radeon/r600.c b/drivers/gpu/drm/radeon/r600.c index d7896bb553a9..9247e7d207fe 100644 --- a/drivers/gpu/drm/radeon/r600.c +++ b/drivers/gpu/drm/radeon/r600.c | |||
@@ -1002,7 +1002,8 @@ void r600_hpd_init(struct radeon_device *rdev) | |||
1002 | break; | 1002 | break; |
1003 | } | 1003 | } |
1004 | } | 1004 | } |
1005 | enable |= 1 << radeon_connector->hpd.hpd; | 1005 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
1006 | enable |= 1 << radeon_connector->hpd.hpd; | ||
1006 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); | 1007 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); |
1007 | } | 1008 | } |
1008 | radeon_irq_kms_enable_hpd(rdev, enable); | 1009 | radeon_irq_kms_enable_hpd(rdev, enable); |
@@ -1055,7 +1056,8 @@ void r600_hpd_fini(struct radeon_device *rdev) | |||
1055 | break; | 1056 | break; |
1056 | } | 1057 | } |
1057 | } | 1058 | } |
1058 | disable |= 1 << radeon_connector->hpd.hpd; | 1059 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
1060 | disable |= 1 << radeon_connector->hpd.hpd; | ||
1059 | } | 1061 | } |
1060 | radeon_irq_kms_disable_hpd(rdev, disable); | 1062 | radeon_irq_kms_disable_hpd(rdev, disable); |
1061 | } | 1063 | } |
diff --git a/drivers/gpu/drm/radeon/rs600.c b/drivers/gpu/drm/radeon/rs600.c index 3c250c445bdb..0051c4288725 100644 --- a/drivers/gpu/drm/radeon/rs600.c +++ b/drivers/gpu/drm/radeon/rs600.c | |||
@@ -413,7 +413,8 @@ void rs600_hpd_init(struct radeon_device *rdev) | |||
413 | default: | 413 | default: |
414 | break; | 414 | break; |
415 | } | 415 | } |
416 | enable |= 1 << radeon_connector->hpd.hpd; | 416 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
417 | enable |= 1 << radeon_connector->hpd.hpd; | ||
417 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); | 418 | radeon_hpd_set_polarity(rdev, radeon_connector->hpd.hpd); |
418 | } | 419 | } |
419 | radeon_irq_kms_enable_hpd(rdev, enable); | 420 | radeon_irq_kms_enable_hpd(rdev, enable); |
@@ -439,7 +440,8 @@ void rs600_hpd_fini(struct radeon_device *rdev) | |||
439 | default: | 440 | default: |
440 | break; | 441 | break; |
441 | } | 442 | } |
442 | disable |= 1 << radeon_connector->hpd.hpd; | 443 | if (radeon_connector->hpd.hpd != RADEON_HPD_NONE) |
444 | disable |= 1 << radeon_connector->hpd.hpd; | ||
443 | } | 445 | } |
444 | radeon_irq_kms_disable_hpd(rdev, disable); | 446 | radeon_irq_kms_disable_hpd(rdev, disable); |
445 | } | 447 | } |