On Mon, 01 Jun 2026, Jani Nikula <[email protected]> wrote:
> On Fri, 29 May 2026, Thomas Zimmermann <[email protected]> wrote:
>> Rajat Gupta (1):
>>       drm: prevent integer overflows in dumb buffer creation helpers
>
> Looks like this commit 5ab62dd3687b ("drm: prevent integer overflows in
> dumb buffer creation helpers") regressed in our CI, awaiting
> confirmation.

The IGT test kms_big_fb uses max width and height from GetResources, and
i915 and xe use max_width 16384 and max_height 16384 in mode config.

The regressing commit adds random hard limits not based on anything:

+       /* Reject unreasonable inputs early.  Dumb buffers are for software
+        * rendering; nothing legitimate needs more than 8192x8192 at 32bpp.
+        * This prevents overflows in downstream alignment helpers.
+        */
+       if (args->width >= 8192 || args->height >= 8192 || args->bpp > 32)
+               return -EINVAL;

This is now in v7.1-rc6. Please revert ASAP.


BR,
Jani.


>
> No matter what, it's immediately suspect because AFAICT it was not
> posted on the lists, and the commit doesn't have a Link: trailer
> pointing at the patch.
>
> This is not how we're supposed to roll. What's going on?
>
>
> BR,
> Jani.

-- 
Jani Nikula, Intel

Reply via email to