[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
This bug is awaiting verification that the linux-
hwe-5.15/5.15.0-23.23~20.04.1 kernel in -proposed solves the problem.
Please test the kernel and update this bug with the results. If the
problem is solved, change the tag 'verification-needed-focal' to
'verification-done-focal'. If the problem still exists, change the tag
'verification-needed-focal' to 'verification-failed-focal'.
If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!
** Tags added: verification-needed-focal
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Jammy:
Fix Released
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
** Changed in: hwe-next
Status: New => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Jammy:
Fix Released
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from 0xf41f40 for PSP TMR
[ 5.625250] usb 3-2.4: reset
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
This bug was fixed in the package linux - 5.15.0-22.22
---
linux (5.15.0-22.22) jammy; urgency=medium
* jammy/linux: 5.15.0-22.22 -proposed tracker (LP: #1960290)
-- Paolo Pisati Tue, 08 Feb 2022 10:48:49
+0100
** Changed in: linux (Ubuntu Jammy)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
New
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Jammy:
Fix Released
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm]
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
Has been committed to 5.15.0-19.19 or later. Currently respan in
5.15.0-22.22 in focal-proposed.
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
New
Status in linux package in Ubuntu:
Fix Committed
Status in linux source package in Jammy:
Fix Committed
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from 0xf41f40 for PSP TMR
[
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
** Changed in: linux (Ubuntu Jammy)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
New
Status in linux package in Ubuntu:
Fix Committed
Status in linux source package in Jammy:
Fix Committed
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from 0xf41f40 for PSP TMR
[ 5.625250] usb 3-2.4:
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
** Also affects: linux (Ubuntu Jammy)
Importance: High
Assignee: You-Sheng Yang (vicamo)
Status: In Progress
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
New
Status in linux package in Ubuntu:
In Progress
Status in linux source package in Jammy:
In Progress
Bug description:
[SRU Justification]
[Impact]
On HP Lockheed16, following UBSAN warning dumped at boot and the first
USB4 port is disabled:
UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
This is a follow-up for bug 1953008 on Jammy, which only happens when
patches for USB4 alt mode were applied and tested on a HP platform.
[Fix]
Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
stream encoder regs") from Linus' tree.
[Test Case]
Apply and check no more such warning, and USB alt mode should work.
[Where problems could occur]
No. This specifies the expected array size to avoid UBSAN warning.
[Other Info]
While UBSAN is only turned on by default on 5.15 kernels or newer, and
we didn't find this issue on oem-5.14, so only Jammy is nominated here.
== original bug report ==
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
SRU: https://lists.ubuntu.com/archives/kernel-
team/2022-January/127257.html (jammy)
** Description changed:
+ [SRU Justification]
+
+ [Impact]
+
+ On HP Lockheed16, following UBSAN warning dumped at boot and the first
+ USB4 port is disabled:
+
+ UBSAN: array-index-out-of-bounds in
/drivers/gpu/drm/amd/amdgpu/../display/dc/dcn31/dcn31_resource.c:1295:22
+ index 6 is out of range for type 'dcn10_stream_enc_registers[5]'
+
+ This is a follow-up for bug 1953008 on Jammy, which only happens when
+ patches for USB4 alt mode were applied and tested on a HP platform.
+
+ [Fix]
+
+ Commit d374d3b49321 ("drm/amd/display: Fix out of bounds access on DNC31
+ stream encoder regs") from Linus' tree.
+
+ [Test Case]
+
+ Apply and check no more such warning, and USB alt mode should work.
+
+ [Where problems could occur]
+
+ No. This specifies the expected array size to avoid UBSAN warning.
+
+ [Other Info]
+
+ While UBSAN is only turned on by default on 5.15 kernels or newer, and
+ we didn't find this issue on oem-5.14, so only Jammy is nominated here.
+
+ == original bug report ==
+
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches for
USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from 0xf41f40 for PSP TMR
[ 5.625250] usb 3-2.4: reset high-speed USB device number 4 using xhci_hcd
[ 5.644351] intel_rapl_common: Found RAPL domain package
[ 5.644356] intel_rapl_common: Found RAPL domain core
[ 5.665305] amdgpu :64:00.0: amdgpu: RAS: optional ras ta ucode is not
available
[ 5.671557] amdgpu :64:00.0: amdgpu: RAP: optional rap ta ucode is not
available
[Kernel-packages] [Bug 1958229] Re: UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp platform
** Changed in: linux (Ubuntu)
Status: Incomplete => In Progress
** Changed in: linux (Ubuntu)
Importance: Undecided => High
** Changed in: linux (Ubuntu)
Assignee: (unassigned) => You-Sheng Yang (vicamo)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1958229
Title:
UBSAN: array-index-out-of-bounds in dcn31_resources on AMD yellow carp
platform
Status in HWE Next:
New
Status in linux package in Ubuntu:
In Progress
Bug description:
UBSAN: array-index-out-of-bounds in
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c:1295:22
This is a follow-up for bug 1953008, which only happens when patches
for USB4 alt mode were applied.
This is found on HP Lockheed16 and will disable one of the tbt port.
Source tree available in
https://git.launchpad.net/~vicamo/+git/ubuntu-
kernel/tree/drivers/gpu/drm/amd/display/dc/dcn31/dcn31_resource.c?h=bug-1953008/amdgpu-
yellow-carp-support-
usb4-altmode/jammy=243857296edd341e5054cc50732b3af3432eaaf6#n1295
1263 static struct stream_encoder *dcn31_stream_encoder_create(
1264 enum engine_id eng_id,
1265 struct dc_context *ctx)
1266 {
...
1293 dcn30_dio_stream_encoder_construct(enc1, ctx, ctx->dc_bios,
1294 eng_id, vpg, afmt,
1295 _enc_regs[eng_id],
1296 _shift, _mask);
[ 5.557065] [drm] amdgpu kernel modesetting enabled.
[ 5.562748] amdgpu: Virtual CRAT table created for CPU
[ 5.562769] amdgpu: Topology: Add CPU node
[ 5.563048] checking generic (32000 8ca000) vs hw (32000 1000)
[ 5.563053] fb0: switching to amdgpu from EFI VGA
[ 5.563274] Console: switching to colour dummy device 80x25
[ 5.563386] amdgpu :64:00.0: vgaarb: deactivate vga console
[ 5.563768] [drm] initializing kernel modesetting (YELLOW_CARP 0x1002:0x1681
0x103C:0x8990 0xD5).
[ 5.563791] amdgpu :64:00.0: amdgpu: Trusted Memory Zone (TMZ) feature
disabled as experimental (default)
[ 5.563968] [drm] register mmio base: 0xA480
[ 5.563969] [drm] register mmio size: 524288
[ 5.563976] [drm] PCIE atomic ops is not supported
[ 5.565481] [drm] add ip block number 0
[ 5.565483] [drm] add ip block number 1
[ 5.565484] [drm] add ip block number 2
[ 5.565485] [drm] add ip block number 3
[ 5.565486] [drm] add ip block number 4
[ 5.565487] [drm] add ip block number 5
[ 5.565488] [drm] add ip block number 6
[ 5.565490] [drm] add ip block number 7
[ 5.565491] [drm] add ip block number 8
[ 5.565492] [drm] add ip block number 9
[ 5.565512] amdgpu :64:00.0: amdgpu: Fetched VBIOS from VFCT
[ 5.565515] amdgpu: ATOM BIOS: 113-REMBRANDT-032
[ 5.565529] [drm] VCN(0) decode is enabled in VM mode
[ 5.565530] [drm] VCN(0) encode is enabled in VM mode
[ 5.565532] [drm] JPEG decode is enabled in VM mode
[ 5.565570] [drm] vm size is 262144 GB, 4 levels, block size is 9-bit,
fragment size is 9-bit
[ 5.565576] amdgpu :64:00.0: amdgpu: VRAM: 512M 0x00F4 -
0x00F41FFF (512M used)
[ 5.565579] amdgpu :64:00.0: amdgpu: GART: 512M 0x -
0x1FFF
[ 5.565580] amdgpu :64:00.0: amdgpu: AGP: 267419648M 0x00F8 -
0x
[ 5.565589] [drm] Detected VRAM RAM=512M, BAR=512M
[ 5.565590] [drm] RAM width 64bits DDR5
[ 5.565640] [drm] amdgpu: 512M of VRAM memory ready
[ 5.565642] [drm] amdgpu: 3072M of GTT memory ready.
[ 5.565658] [drm] GART: num cpu pages 131072, num gpu pages 131072
[ 5.566076] [drm] PCIE GART of 512M enabled (table at 0x00F4008CA000).
[ 5.567973] amdgpu :64:00.0: amdgpu: PSP runtime database doesn't exist
[ 5.573492] [drm] use_doorbell being set to: [true]
[ 5.574279] [drm] Loading DMUB firmware via PSP: version=0x040D
[ 5.574727] [drm] Found VCN firmware Version ENC: 1.14 DEC: 2 VEP: 0
Revision: 3
[ 5.574733] amdgpu :64:00.0: amdgpu: Will use PSP to load VCN firmware
[ 5.599344] [drm] reserve 0xa0 from 0xf41f40 for PSP TMR
[ 5.625250] usb 3-2.4: reset high-speed USB device number 4 using xhci_hcd
[ 5.644351] intel_rapl_common: Found RAPL domain package
[ 5.644356] intel_rapl_common: Found RAPL domain core
[ 5.665305] amdgpu :64:00.0: amdgpu: RAS: optional ras ta ucode is not
available
[ 5.671557] amdgpu :64:00.0: amdgpu: RAP: optional rap ta ucode is not
available
[ 5.671562] amdgpu :64:00.0: amdgpu: SECUREDISPLAY: securedisplay ta
ucode is not available
[ 5.671649] amdgpu :64:00.0: amdgpu: smu fw reported version = 0x04450800
(1093.8.0)
[ 5.674717] amdgpu :64:00.0: amdgpu: SMU is initialized successfully!
[ 5.675088] [drm] kiq ring mec 2 pipe 1 q 0
[ 5.675818]
[ 5.675825] UBSAN: array-index-out-of-bounds in
