vc4: Fix off-by-one in branch target validation.
authorEric Anholt <eric@anholt.net>
Thu, 9 Apr 2015 20:43:55 +0000 (13:43 -0700)
committerEric Anholt <eric@anholt.net>
Tue, 14 Apr 2015 05:34:06 +0000 (22:34 -0700)
src/gallium/drivers/vc4/kernel/vc4_validate.c

index 6b73587997520e7ec104f5cc9d1225c7d3514e5c..aeac29e036fe0a9b94ee0785dbecf85169c76c3f 100644 (file)
@@ -287,7 +287,7 @@ validate_branch_to_sublist(VALIDATE_ARGS)
 
        offset = *(uint32_t *)(untrusted + 0);
        if (offset % exec->tile_alloc_init_block_size ||
-           offset / exec->tile_alloc_init_block_size >
+           offset / exec->tile_alloc_init_block_size >=
            exec->bin_tiles_x * exec->bin_tiles_y) {
                DRM_ERROR("VC4_PACKET_BRANCH_TO_SUB_LIST must jump to initial "
                          "tile allocation space.\n");