]> git.baikalelectronics.ru Git - kernel.git/commit
drm: tests: Fix a buffer overflow in format_helper_test
authorDavid Gow <davidgow@google.com>
Wed, 19 Oct 2022 07:32:40 +0000 (15:32 +0800)
committerJavier Martinez Canillas <javierm@redhat.com>
Thu, 20 Oct 2022 07:56:05 +0000 (09:56 +0200)
commite5ee7f260fe7a878fd67d5a698b5205921a6217f
tree7a6eda7da42ee147ea23de75dd0e796e03439cf7
parenta410f99df65ccf090c353e71b6caa65f41b4ff2c
drm: tests: Fix a buffer overflow in format_helper_test

The xrgb2101010 format conversion test (unlike for other formats) does
an endianness conversion on the results. However, it always converts
TEST_BUF_SIZE 32-bit integers, which results in reading from (and
writing to) more memory than in present in the result buffer. Instead,
use the buffer size, divided by sizeof(u32).

The issue could be reproduced with KASAN:
./tools/testing/kunit/kunit.py run --kunitconfig drivers/gpu/drm/tests \
--kconfig_add CONFIG_KASAN=y --kconfig_add CONFIG_KASAN_VMALLOC=y \
--kconfig_add CONFIG_KASAN_KUNIT_TEST=y \
drm_format_helper_test.*xrgb2101010

Reported-by: Linux Kernel Functional Testing <lkft@linaro.org>
Fixes: 5407cb573ec5 ("drm/format-helper: Add KUnit tests for drm_fb_xrgb8888_to_xrgb2101010()")
Signed-off-by: David Gow <davidgow@google.com>
Reviewed-by: Maíra Canal <mairacanal@riseup.net>
Reviewed-by: Javier Martinez Canillas <javierm@redhat.com>
Reviewed-by: José Expósito <jose.exposito89@gmail.com>
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20221019073239.3779180-1-davidgow@google.com
drivers/gpu/drm/tests/drm_format_helper_test.c