[Spice-devel] [PATCH] drm/nouveau: Fix out-of-bounds access when deferencing MMU type

2020-11-10 Thread Thomas Zimmermann
The value of struct drm_device.ttm.type_vram can become -1 for unknown types of memory (see nouveau_ttm_init()). This leads to an out-of-bounds error when accessing struct nvif_mmu.type[]: [ 18.304116] == [ 18.311649] BUG: KA

Re: [Spice-devel] [PATCH] drm/nouveau: Fix out-of-bounds access when deferencing MMU type

2020-11-10 Thread Ruhl, Michael J
>-Original Message- >From: Thomas Zimmermann >Sent: Tuesday, November 10, 2020 8:37 AM >To: bske...@redhat.com; airl...@linux.ie; dan...@ffwll.ch; Ruhl, Michael J >; christian.koe...@amd.com >Cc: nouv...@lists.freedesktop.org; dri-de...@lists.freedesktop.org; Thomas >Zimmermann ; Maarten

Re: [Spice-devel] [PATCH] drm/nouveau: Fix out-of-bounds access when deferencing MMU type

2020-11-10 Thread Christian König
Am 10.11.20 um 14:36 schrieb Thomas Zimmermann: The value of struct drm_device.ttm.type_vram can become -1 for unknown types of memory (see nouveau_ttm_init()). This leads to an out-of-bounds error when accessing struct nvif_mmu.type[]: [ 18.304116]