drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
authorNikita Zhandarovich <n.zhandarovich@fintech.ru>
Wed, 29 Nov 2023 15:22:30 +0000 (07:22 -0800)
committerAlex Deucher <alexander.deucher@amd.com>
Thu, 30 Nov 2023 23:26:31 +0000 (18:26 -0500)
commit39c960bbf9d9ea862398759e75736cfb68c3446f
tree42a0b0bb1fbc5732b172954c443052d94638823d
parentf875f61b1fd626a4223a5bdf0339b5372c689e13
drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()

While improbable, there may be a chance of hitting integer
overflow when the result of radeon_get_ib_value() gets shifted
left.

Avoid it by casting one of the operands to larger data type (u64).

Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.

Fixes: 1729dd33d20b ("drm/radeon/kms: r600 CS parser fixes")
Signed-off-by: Nikita Zhandarovich <n.zhandarovich@fintech.ru>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/radeon/r600_cs.c