From: Alex Hung <[email protected]>

[ Upstream commit 687fe329f18ab0ab0496b20ed2cb003d4879d931 ]

[WHY & HOW]
tg_inst will be a negative if timing_generator_count equals 0, which
should be checked before used.

This fixes 2 OVERRUN issues reported by Coverity.

Reviewed-by: Harry Wentland <[email protected]>
Acked-by: Tom Chung <[email protected]>
Signed-off-by: Alex Hung <[email protected]>
Tested-by: Daniel Wheeler <[email protected]>
Signed-off-by: Alex Deucher <[email protected]>
Signed-off-by: Sasha Levin <[email protected]>
---
 drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/gpu/drm/amd/display/dc/core/dc_resource.c 
b/drivers/gpu/drm/amd/display/dc/core/dc_resource.c
index 15819416a2f36..693d05a98c6fb 100644
--- a/drivers/gpu/drm/amd/display/dc/core/dc_resource.c
+++ b/drivers/gpu/drm/amd/display/dc/core/dc_resource.c
@@ -3492,7 +3492,7 @@ static bool acquire_otg_master_pipe_for_stream(
                if (pool->dpps[pipe_idx])
                        pipe_ctx->plane_res.mpcc_inst = 
pool->dpps[pipe_idx]->inst;
 
-               if (pipe_idx >= pool->timing_generator_count) {
+               if (pipe_idx >= pool->timing_generator_count && 
pool->timing_generator_count != 0) {
                        int tg_inst = pool->timing_generator_count - 1;
 
                        pipe_ctx->stream_res.tg = 
pool->timing_generators[tg_inst];
-- 
2.43.0

Reply via email to