From: Eric Anholt Date: Thu, 9 Apr 2015 20:43:55 +0000 (-0700) Subject: vc4: Fix off-by-one in branch target validation. X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=d04b07f8e2eb61bb389f2d6b8ed0a501952466ee;p=mesa.git vc4: Fix off-by-one in branch target validation. --- diff --git a/src/gallium/drivers/vc4/kernel/vc4_validate.c b/src/gallium/drivers/vc4/kernel/vc4_validate.c index 6b735879975..aeac29e036f 100644 --- a/src/gallium/drivers/vc4/kernel/vc4_validate.c +++ b/src/gallium/drivers/vc4/kernel/vc4_validate.c @@ -287,7 +287,7 @@ validate_branch_to_sublist(VALIDATE_ARGS) offset = *(uint32_t *)(untrusted + 0); if (offset % exec->tile_alloc_init_block_size || - offset / exec->tile_alloc_init_block_size > + offset / exec->tile_alloc_init_block_size >= exec->bin_tiles_x * exec->bin_tiles_y) { DRM_ERROR("VC4_PACKET_BRANCH_TO_SUB_LIST must jump to initial " "tile allocation space.\n");