Dmitry Baryshkov 2b4abf8793 drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx ...

Before a5xx Adreno driver will not try fetching UBWC params (because
those generations didn't support UBWC anyway), however it's still
possible to query UBWC-related params from the userspace, triggering
possible NULL pointer dereference. Check for UBWC config in
adreno_get_param() and return sane defaults if there is none.

Fixes: a452510aad ("drm/msm/adreno: Switch to the common UBWC config struct")
Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Reviewed-by: Rob Clark <rob.clark@oss.qualcomm.com>
Patchwork: https://patchwork.freedesktop.org/patch/717778/
Message-ID: <20260411-adreno-fix-ubwc-v3-1-4983156f3f80@oss.qualcomm.com>
Signed-off-by: Rob Clark <robin.clark@oss.qualcomm.com>

2026-05-13 14:37:53 -07:00

..

adreno

drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

2026-05-13 14:37:53 -07:00

disp

drm/msm/dpu: don't mix devm and drmm functions

2026-05-13 16:20:36 +03:00

dp

drm/msm/dp: remove debugging prints with internal struct phy state

2026-04-01 18:02:18 +03:00

dsi

drm/msm/dsi: don't dump registers past the mapped region

2026-05-13 16:18:35 +03:00

hdmi

drm/msm/hdmi: Drop redundant 'int' for longs

2026-03-25 08:06:09 +02:00

registers

drm/msm/a6xx: Add soft fuse detection support

2026-03-31 13:47:30 -07:00

.gitignore

…

Kconfig

drm/msm: rearrange symbol selection

2025-07-05 07:13:35 -07:00

Makefile

drm/msm/a8xx: Preemption support for A840

2026-03-31 13:47:30 -07:00

msm_atomic_trace.h

…

msm_atomic_tracepoints.c

…

msm_atomic.c

drm/msm/dpu: don't set crtc_state->mode_changed from atomic_check()

2025-03-05 04:33:33 +02:00

msm_debugfs.c

drm/msm: Fix dereference of pointer minor before null check

2025-08-07 09:22:27 -07:00

msm_debugfs.h

…

msm_drv.c

drm/msm/gem: fix error handling in msm_ioctl_gem_info_get_metadata()

2026-03-31 13:47:28 -07:00

msm_drv.h

Merge tag 'drm-msm-next-2025-09-12' of https://gitlab.freedesktop.org/drm/msm into drm-next

2025-09-16 10:21:38 +10:00

msm_dsc_helper.h

drm/msm/dsi: Use existing per-interface slice count in DSC timing

2025-02-26 12:15:48 +02:00

msm_fb.c

drm/msm: Reject fb creation from _NO_SHARE objs

2026-03-31 13:47:27 -07:00

msm_fbdev.c

drm/fb-helper: Allocate and release fb_info in single place

2025-11-25 11:02:43 +01:00

msm_fence.c

drm/msm: Switch to use hrtimer_setup()

2025-02-18 11:19:06 +01:00

msm_fence.h

drm/msm: msm_fence.h: fix all kernel-doc warnings

2025-12-24 11:24:19 +02:00

msm_gem_prime.c

drm/msm: Fix 32b size truncation

2025-09-06 08:58:11 -07:00

msm_gem_shrinker.c

drm/msm/shrinker: Fix can_block() logic

2026-03-31 13:47:28 -07:00

msm_gem_submit.c

drm/msm: Remove abuse of drm_exec internals

2026-03-31 20:17:23 -07:00

msm_gem_vma.c

drm/msm: Fix VM_BIND UNMAP locking

2026-03-31 13:47:28 -07:00

msm_gem.c

drm/msm/vma: Avoid lock in VM_BIND fence signaling path

2026-03-31 13:47:27 -07:00

msm_gem.h

drm/msm: Remove abuse of drm_exec internals

2026-03-31 20:17:23 -07:00

msm_gpu_devfreq.c

drm/msm/gpu: Fix crash when throttling GPU immediately during boot

2025-05-04 09:20:28 -07:00

msm_gpu_trace.h

drm/msm: Add an ftrace for gpu register access

2025-09-08 07:24:59 -07:00

msm_gpu_tracepoints.c

…

msm_gpu.c

drm/msm: always recover the gpu

2026-03-31 13:47:27 -07:00

msm_gpu.h

drm/msm: msm_gpu.h: fix all kernel-doc warnings

2025-12-24 11:24:19 +02:00

msm_io_utils.c

drm/msm: Switch to use hrtimer_setup()

2025-02-18 11:19:06 +01:00

msm_iommu.c

drm/msm: Adjust msm_iommu_pagetable_prealloc_allocate() allocation type

2026-02-24 01:28:18 +02:00

msm_kms.c

drm/msm/mdp4: use msm_kms_init_vm() instead of duplicating it

2025-09-08 07:24:58 -07:00

msm_kms.h

drm/msm: make it possible to disable KMS-related code.

2025-07-05 07:13:35 -07:00

msm_mdss.c

drm/msm/mdss: Add a TODO for better managing the MDSS clock power state

2026-03-25 08:06:09 +02:00

msm_mmu.h

drm/msm: Support pgtable preallocation

2025-07-04 17:48:37 -07:00

msm_perf.c

drm/msm: Replace unsafe snprintf usage with scnprintf

2025-12-24 17:55:29 +02:00

msm_rd.c

drm/msm: rd dumping support for sparse

2025-07-04 17:48:37 -07:00

msm_ringbuffer.c

drm/msm: Drop queued submits on lastclose()

2025-07-04 17:48:36 -07:00

msm_ringbuffer.h

…

msm_submitqueue.c

drm/msm/adreno: Disable IFPC when sysprof is active

2025-09-08 07:25:00 -07:00

msm_syncobj.c

drm/msm: Extract out syncobj helpers

2025-07-04 17:48:37 -07:00

msm_syncobj.h

drm/msm: Extract out syncobj helpers

2025-07-04 17:48:37 -07:00

NOTES

…