drm/msm/a6xx: fix a potential overflow issue

[ Upstream commit 08d3ab4b46339bc6f97e83b54a3fb4f8bf8f4cd9 ]

It's allocating an array of a6xx_gpu_state_obj structure rathor than
its pointers.

This patch fix it.

Signed-off-by: Zhenzhong Duan <zhenzhong.duan@gmail.com>
Signed-off-by: Rob Clark <robdclark@chromium.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

diff --git a/drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c b/drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c
index b12f5b4a1bea9109545b2c700b26df72577c87eb..e9ede19193b0eb06275d1a8f4422a606c4844428 100644 (file)
--- a/drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c
+++ b/drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c
@@ -875,7 +875,7 @@ static void a6xx_get_indexed_registers(struct msm_gpu *gpu,
        int i;
 
        a6xx_state->indexed_regs = state_kcalloc(a6xx_state, count,
-               sizeof(a6xx_state->indexed_regs));
+               sizeof(*a6xx_state->indexed_regs));
        if (!a6xx_state->indexed_regs)
                return;