Re: [PATCH] drm/amdgpu: Fix integer overflow in amdgpu_gem_add_input_fence()

Applied. Thanks! Alex On Fri, May 23, 2025 at 12:34 PM Dan Carpenter wrote: > > The "num_syncobj_handles" is a u32 value that comes from the user via the > ioctl. On 32bit systems the "sizeof(uint32_t) * num_syncobj_handles" > multiplication can have an integer overflow. Use size_mul() to fix

[PATCH] drm/amdgpu: Fix integer overflow in amdgpu_gem_add_input_fence()

The "num_syncobj_handles" is a u32 value that comes from the user via the ioctl. On 32bit systems the "sizeof(uint32_t) * num_syncobj_handles" multiplication can have an integer overflow. Use size_mul() to fix that. Fixes: 38c67ec9aa4b ("drm/amdgpu: Add input fence to sync bo map/unmap") Cc: sta