On Wed, 01 Jul 2026 11:44:34 -0700, Shuvam Pandey wrote:
> pvr_set_uobj_array() copies an array of kernel objects to a userspace
> array whose element size is described by out->stride. When out->stride
> is different from the kernel object size, the slow path advances the
> userspace pointer by the kernel object size and the kernel pointer by the
> userspace stride.
>
> This reverses the intended layout. For larger userspace strides, later
> copies read from the wrong kernel addresses. For smaller userspace
> strides, later copies are written at the wrong userspace offsets. The
> padding clear is also done only for the first element instead of the
> padding area for each element.
>
> [...]
Applied, thanks!
[1/1] drm/imagination: Fix user array stride in pvr_set_uobj_array()
commit: 8dc8f3f4c2382fb7d1b1986ba8f33a2466cd3d7a
Best regards,
--
Alessio Belle <[email protected]>
