Quoting Michal Srb (2018-02-05 15:17:45) > The command MEDIA_VFE_STATE checks bits at offset +2 dwords. However, it is > possible to have MEDIA_VFE_STATE command with length = 0 + LENGTH_BIAS = 2. > In that case check_cmd will read bits from the following command, or even past > the end of the buffer. > > If the offset ends up outside of the command length, reject the command. > > Signed-off-by: Michal Srb <msrb@xxxxxxxx> Looks good, both Reviewed-by: Chris Wilson <chris@xxxxxxxxxxxxxxxxxx> I'll resend them to intel-gfx@ so CI picks them up for the checklist. -Chris _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx https://lists.freedesktop.org/mailman/listinfo/dri-devel
