drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
authorZhenyu Wang <zhenyuw@linux.intel.com>
Wed, 20 Feb 2019 08:25:04 +0000 (16:25 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Apr 2019 04:26:26 +0000 (06:26 +0200)
commitdf74e70ffec6757f9ea75e7d1ea35de29c7d8b1a
treefd2e0f4fd90d6fe9d96b83b9da21d72cc1602303
parent75f9e994b9fda979f542e8987bb9db9e2db82862
drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check

commit 13bcb80b7ee79431fce361e060611134cb19e209 upstream.

When MI_FLUSH_DW post write hw status page in index mode, the index
value is in dword step and turned into address offset in cmd dword1.
As status page size is 4K, so can't exceed that.

This fixed upper bound check in cmd parser code which incorrectly
stopped VM for reason of invalid MI_FLUSH_DW write index.

v2:
- Fix upper bound as 4K page size because index value is address offset.

Fixes: be1da7070aea ("drm/i915/gvt: vGPU command scanner")
Cc: stable@vger.kernel.org # v4.10+
Cc: "Zhao, Yan Y" <yan.y.zhao@intel.com>
Reviewed-by: Yan Zhao <yan.y.zhao@intel.com>
Signed-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/gpu/drm/i915/gvt/cmd_parser.c