On 22/06/2026 15:14, Joonas Lahtinen wrote:
(Correct mail for Tvrtko, dim fixes not handling .mailmap?)

Quoting Joonas Lahtinen (2026-06-22 16:25:39)
Add missing Spectre mitigation for userspace controlled parallel
submission slot.

Discovered using AI-assisted static analysis confirmed by Intel
Product Security.

Reported-by: Martin Hodo <[email protected]>
Fixes: e5e32171a2cf ("drm/i915/guc: Connect UAPI to GuC multi-lrc interface")
Cc: Matthew Brost <[email protected]>
Cc: Tvrtko Ursulin <[email protected]>
Signed-off-by: Joonas Lahtinen <[email protected]>
---
  drivers/gpu/drm/i915/gem/i915_gem_context.c | 1 +
  1 file changed, 1 insertion(+)

diff --git a/drivers/gpu/drm/i915/gem/i915_gem_context.c 
b/drivers/gpu/drm/i915/gem/i915_gem_context.c
index 6ac0f23570f3..aeafe1742d30 100644
--- a/drivers/gpu/drm/i915/gem/i915_gem_context.c
+++ b/drivers/gpu/drm/i915/gem/i915_gem_context.c
@@ -613,6 +613,7 @@ set_proto_ctx_engines_parallel_submit(struct 
i915_user_extension __user *base,
                 return -EINVAL;
         }
+ slot = array_index_nospec(slot, set->num_engines);
         if (set->engines[slot].type != I915_GEM_ENGINE_TYPE_INVALID) {
                 drm_dbg(&i915->drm,
                         "Invalid placement[%d], already occupied\n", slot);
--
2.54.0


Reviewed-by: Tvrtko Ursulin <[email protected]>

Regards,

Tvrtko

Reply via email to