diff options
| -rw-r--r-- | sys/dev/pci/drm/amd/amdgpu/amdgpu_securedisplay.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/dev/pci/drm/amd/amdgpu/amdgpu_securedisplay.c b/sys/dev/pci/drm/amd/amdgpu/amdgpu_securedisplay.c index 8ed0e073656..41ebe690eef 100644 --- a/sys/dev/pci/drm/amd/amdgpu/amdgpu_securedisplay.c +++ b/sys/dev/pci/drm/amd/amdgpu/amdgpu_securedisplay.c @@ -135,6 +135,10 @@ static ssize_t amdgpu_securedisplay_debugfs_write(struct file *f, const char __u mutex_unlock(&psp->securedisplay_context.mutex); break; case 2: + if (size < 3 || phy_id >= TA_SECUREDISPLAY_MAX_PHY) { + dev_err(adev->dev, "Invalid input: %s\n", str); + return -EINVAL; + } mutex_lock(&psp->securedisplay_context.mutex); psp_prep_securedisplay_cmd_buf(psp, &securedisplay_cmd, TA_SECUREDISPLAY_COMMAND__SEND_ROI_CRC); |