[PATCH 02/15] drm/i915/skl_watermark: Add bounds check for scaler array access

[Ankit Nautiyal]

Ensure num_scaler_users does not exceed the size of scaler_state->scalers[]
before accessing scaler parameters in dsc_prefill_latency.

Signed-off-by: Ankit Nautiyal <ankit.k.nauti...@intel.com>
---
 drivers/gpu/drm/i915/display/skl_watermark.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/drivers/gpu/drm/i915/display/skl_watermark.c 
b/drivers/gpu/drm/i915/display/skl_watermark.c
index 5a120c1f66f4..9d52727b81b1 100644
--- a/drivers/gpu/drm/i915/display/skl_watermark.c
+++ b/drivers/gpu/drm/i915/display/skl_watermark.c
@@ -2191,7 +2191,8 @@ dsc_prefill_latency(const struct intel_crtc_state 
*crtc_state)
 
        if (!crtc_state->dsc.compression_enable ||
            !num_scaler_users ||
-           num_scaler_users > crtc->num_scalers)
+           num_scaler_users > crtc->num_scalers ||
+           num_scaler_users > ARRAY_SIZE(scaler_state->scalers))
                return dsc_prefill_latency;
 
        dsc_prefill_latency = DIV_ROUND_UP(15 * linetime * 
chroma_downscaling_factor, 10);
-- 
2.45.2