From: Mehdi Ben Hadj Khelifa <mehdi.benhadjkhelifa@gmail.com>
To: Shuah Khan <skhan@linuxfoundation.org>,
javierm@redhat.com, maarten.lankhorst@linux.intel.com,
mripard@kernel.org, tzimmermann@suse.de, airlied@gmail.com,
simona@ffwll.ch
Cc: dri-devel@lists.freedesktop.org, linux-kernel@vger.kernel.org,
david.hunter.linux@gmail.com, khalid@kernel.org,
linux-kernel-mentees@lists.linuxfoundation.org
Subject: Re: [PATCH] drm/solomon: Use kmalloc_array() instead of kmalloc()
Date: Mon, 20 Oct 2025 23:06:34 +0100 [thread overview]
Message-ID: <8dc12a18-58ee-4df6-a9f3-12d8c05a0954@gmail.com> (raw)
In-Reply-To: <3f523293-8a8d-4136-b4bc-4ad0d4a50c59@linuxfoundation.org>
On 10/20/25 9:56 PM, Shuah Khan wrote:
> On 10/20/25 15:38, Mehdi Ben Hadj Khelifa wrote:
>> On 10/20/25 9:08 PM, Shuah Khan wrote:
>>> On 10/19/25 08:58, Mehdi Ben Hadj Khelifa wrote:
>>>> Replace kmalloc() with kmalloc_array() in several places to correctly
>>>> handle array allocations and benefit from built-in overflow checking.
>>>> This prevents potential integer overflows[1] when computing allocation
>>>> sizes from width, height, pitch, or page values.
>>>>
>>>> [1]:https://docs.kernel.org/process/deprecated.html
>>>
>>> Mu understanding is that this document lists deprecates APIs so people
>>> don't keep adding new ones.
>>>
>>> I didn't get the impression that we are supposed to go delete them from
>>> the kernel and cause a churn.
>>>
>> the document[1] specifically quotes the following:"
>> Dynamic size calculations (especially multiplication) should not be
>> performed in memory allocator (or similar) function arguments due to
>> the risk of them overflowing. This could lead to values wrapping
>> around and a smaller allocation being made than the caller was
>> expecting. Using those allocations could lead to linear overflows of
>> heap memory and other misbehaviors. (One exception to this is literal
>> values where the compiler can warn if they might overflow. However,
>> the preferred way in these cases is to refactor the code as suggested
>> below to avoid the open-coded arithmetic.)"
>> Specifically mentionned the refactor of the code base in such cases
>> which is why i'm doing the patches in the first place.Also i'm trying
>> the best to send patches related to the issue where such issues of
>> overflow are present or to be consistent with the same API used within
>> the same subsystem.
>> [1]:https://docs.kernel.org/process/deprecated.html> How are you
>> testing these changes - do you have this hardware?
>>>
>>>>
>> I have a raspberrypi zero 2 wh that i'm using in combination with the
>> ssd1306 OLED panel via I2C to test it's rendering and it's working
>> properly by using modetest and seeing no regressions or warnings in
>> dmesg.
>>
>
> Send v2 with all these details and why this change is needed
> in the first place.
>
Okay, I will do that as soon as possible.> When and how does this
potential problem trigger? Is this a
> theoretical or does this happen in this code path and how?
> Next time include all of these details people understand the
> problem better.
>
We'll do in the next iteration.Thanks
BR,
Mehdi> thanks,
> -- Shuah
>
next prev parent reply other threads:[~2025-10-20 21:06 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-10-19 14:58 [PATCH] drm/solomon: Use kmalloc_array() instead of kmalloc() Mehdi Ben Hadj Khelifa
2025-10-20 20:08 ` Shuah Khan
2025-10-20 21:38 ` Mehdi Ben Hadj Khelifa
2025-10-20 20:56 ` Shuah Khan
2025-10-20 22:06 ` Mehdi Ben Hadj Khelifa [this message]
2025-10-21 7:51 ` Javier Martinez Canillas
2025-10-21 8:55 ` Mehdi Ben Hadj Khelifa
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=8dc12a18-58ee-4df6-a9f3-12d8c05a0954@gmail.com \
--to=mehdi.benhadjkhelifa@gmail.com \
--cc=airlied@gmail.com \
--cc=david.hunter.linux@gmail.com \
--cc=dri-devel@lists.freedesktop.org \
--cc=javierm@redhat.com \
--cc=khalid@kernel.org \
--cc=linux-kernel-mentees@lists.linuxfoundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=maarten.lankhorst@linux.intel.com \
--cc=mripard@kernel.org \
--cc=simona@ffwll.ch \
--cc=skhan@linuxfoundation.org \
--cc=tzimmermann@suse.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox