drm/amdgpu: validate user queue parameters
authorAlex Deucher <alexander.deucher@amd.com>
Wed, 26 Feb 2025 21:31:57 +0000 (16:31 -0500)
committerAlex Deucher <alexander.deucher@amd.com>
Tue, 8 Apr 2025 20:48:21 +0000 (16:48 -0400)
Make sure these are set properly to ensure compatibility if
we ever update the IOCTL interface.

Reviewed-by: Prike Liang <Prike.Liang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
drivers/gpu/drm/amd/amdgpu/amdgpu_userqueue.c

index a78a3728f6b8061a61a203293ea5ebaae86e66bb..a02614cbda36e29bc8505dcaaed4316f23f72bb2 100644 (file)
@@ -380,12 +380,26 @@ int amdgpu_userq_ioctl(struct drm_device *dev, void *data,
 
        switch (args->in.op) {
        case AMDGPU_USERQ_OP_CREATE:
+               if (args->in._pad)
+                       return -EINVAL;
                r = amdgpu_userqueue_create(filp, args);
                if (r)
                        DRM_ERROR("Failed to create usermode queue\n");
                break;
 
        case AMDGPU_USERQ_OP_FREE:
+               if (args->in.ip_type ||
+                   args->in.doorbell_handle ||
+                   args->in.doorbell_offset ||
+                   args->in._pad ||
+                   args->in.queue_va ||
+                   args->in.queue_size ||
+                   args->in.rptr_va ||
+                   args->in.wptr_va ||
+                   args->in.wptr_va ||
+                   args->in.mqd ||
+                   args->in.mqd_size)
+                       return -EINVAL;
                r = amdgpu_userqueue_destroy(filp, args->in.queue_id);
                if (r)
                        DRM_ERROR("Failed to destroy usermode queue\n");