1 files changed, 5 insertions, 3 deletions

diff --git a/drivers/gpu/nvgpu/gp106/acr_gp106.c b/drivers/gpu/nvgpu/gp106/acr_gp106.c
index 31ddecf0..5ab8cfcc 100644
--- a/drivers/gpu/nvgpu/gp106/acr_gp106.c
+++ b/drivers/gpu/nvgpu/gp106/acr_gp106.c
@@ -153,7 +153,8 @@ int pmu_ucode_details(struct gk20a *g, struct flcn_ucode_img_v1 *p_img)
                 err = -ENOMEM;
                 goto release_sig;
         }
-        memcpy(lsf_desc, (void *)pmu_sig->data, sizeof(struct lsf_ucode_desc_v1));
+        memcpy(lsf_desc, (void *)pmu_sig->data,
+                        min_t(size_t, sizeof(*lsf_desc), pmu_sig->size));
         lsf_desc->falcon_id = LSF_FALCON_ID_PMU;
 
         p_img->desc = pmu->desc_v1;
@@ -218,7 +219,8 @@ int fecs_ucode_details(struct gk20a *g, struct flcn_ucode_img_v1 *p_img)
                 err = -ENOMEM;
                 goto rel_sig;
         }
-        memcpy(lsf_desc, (void *)fecs_sig->data, sizeof(struct lsf_ucode_desc_v1));
+        memcpy(lsf_desc, (void *)fecs_sig->data,
+                        min_t(size_t, sizeof(*lsf_desc), fecs_sig->size));
         lsf_desc->falcon_id = LSF_FALCON_ID_FECS;
 
         p_img->desc = nvgpu_kzalloc(g, sizeof(struct pmu_ucode_desc_v1));
@@ -314,7 +316,7 @@ int gpccs_ucode_details(struct gk20a *g, struct flcn_ucode_img_v1 *p_img)
                 goto rel_sig;
         }
         memcpy(lsf_desc, (void *)gpccs_sig->data,
-                sizeof(struct lsf_ucode_desc_v1));
+                        min_t(size_t, sizeof(*lsf_desc), gpccs_sig->size));
         lsf_desc->falcon_id = LSF_FALCON_ID_GPCCS;
 
         p_img->desc = nvgpu_kzalloc(g, sizeof(struct pmu_ucode_desc_v1));