Bug 218435 - UBSAN: array-index-out-of-bounds in radeon_atombios.c:2620:43
Summary: UBSAN: array-index-out-of-bounds in radeon_atombios.c:2620:43
Status: RESOLVED WILL_NOT_FIX
Alias: None
Product: Drivers
Classification: Unclassified
Component: Video(DRI - non Intel) (show other bugs)
Hardware: All Linux
: P3 normal
Assignee: drivers_video-dri
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-01-30 08:37 UTC by Sergey Belyashov
Modified: 2024-01-31 10:11 UTC (History)
0 users

See Also:
Kernel Version: 6.5.0-15-generic #15~22.04.1-Ubuntu
Subsystem:
Regression: No
Bisected commit-id:


Attachments
Kernel config (272.40 KB, text/plain)
2024-01-30 08:37 UTC, Sergey Belyashov
Details
dmesg output (103.19 KB, text/plain)
2024-01-30 08:37 UTC, Sergey Belyashov
Details

Description Sergey Belyashov 2024-01-30 08:37:03 UTC
Created attachment 305789 [details]
Kernel config

Part of kernel log:
...
[    2.391350] ATOM BIOS: 87829JEB.SGH
[    2.391375] radeon 0000:01:00.0: VRAM: 1024M 0x0000000000000000 - 0x000000003FFFFFFF (1024M used)
[    2.391379] radeon 0000:01:00.0: GTT: 1024M 0x0000000040000000 - 0x000000007FFFFFFF
[    2.391383] [drm] Detected VRAM RAM=1024M, BAR=256M
[    2.391384] [drm] RAM width 128bits DDR
[    2.391471] [drm] radeon: 1024M of VRAM memory ready
[    2.391474] [drm] radeon: 1024M of GTT memory ready.
[    2.391487] [drm] Loading RV730 Microcode
[    2.391827] [drm] Internal thermal controller with fan control
[    2.391829] ================================================================================
[    2.391835] fbcon: Taking over console
[    2.391840] UBSAN: array-index-out-of-bounds in /build/linux-hwe-6.5-BV4m5T/linux-hwe-6.5-6.5.0/drivers/gpu/drm/radeon/radeon_atombios.c:2620:43
[    2.391847] index 1 is out of range for type 'UCHAR [1]'
[    2.391850] CPU: 0 PID: 113 Comm: systemd-udevd Tainted: G          I        6.5.0-15-generic #15~22.04.1-Ubuntu
[    2.391853] Hardware name: Dell Inc. OptiPlex 380                 /0HN7XN, BIOS A07 06/13/2012
[    2.391855] Call Trace:
[    2.391857]  <TASK>
[    2.391861]  dump_stack_lvl+0x48/0x70
[    2.391868]  dump_stack+0x10/0x20
[    2.391871]  __ubsan_handle_out_of_bounds+0xc6/0x110
[    2.391877]  radeon_atombios_parse_power_table_4_5+0x3c6/0x3e0 [radeon]
[    2.392018]  radeon_atombios_get_power_modes+0x205/0x210 [radeon]
[    2.392099]  radeon_pm_init_dpm+0x8e/0x2f0 [radeon]
[    2.392202]  radeon_pm_init+0xdf/0x120 [radeon]
[    2.392304]  rv770_init+0x1fa/0x3d0 [radeon]
[    2.392406]  radeon_device_init+0x57e/0xaf0 [radeon]
[    2.392485]  radeon_driver_load_kms+0xcc/0x300 [radeon]
[    2.392565]  drm_dev_register+0x10e/0x240 [drm]
[    2.392652]  radeon_pci_probe+0xec/0x180 [radeon]
[    2.392730]  local_pci_probe+0x47/0xb0
[    2.392734]  pci_call_probe+0x55/0x190
[    2.392737]  pci_device_probe+0x84/0x120
[    2.392740]  really_probe+0x1cc/0x430
[    2.392743]  __driver_probe_device+0x8c/0x190
[    2.392746]  driver_probe_device+0x24/0xd0
[    2.392748]  __driver_attach+0x10b/0x210
[    2.392750]  ? __pfx___driver_attach+0x10/0x10
[    2.392753]  bus_for_each_dev+0x8d/0xf0
[    2.392757]  driver_attach+0x1e/0x30
[    2.392760]  bus_add_driver+0x127/0x240
[    2.392763]  driver_register+0x5e/0x130
[    2.392766]  ? __pfx_radeon_module_init+0x10/0x10 [radeon]
[    2.392843]  __pci_register_driver+0x62/0x70
[    2.392846]  radeon_module_init+0x4c/0xff0 [radeon]
[    2.392924]  do_one_initcall+0x5e/0x340
[    2.392929]  do_init_module+0x68/0x260
[    2.392933]  load_module+0xb85/0xcd0
[    2.392937]  ? security_kernel_post_read_file+0x75/0x90
[    2.392940]  ? security_kernel_post_read_file+0x75/0x90
[    2.392943]  init_module_from_file+0x96/0x100
[    2.392946]  ? init_module_from_file+0x96/0x100
[    2.392950]  idempotent_init_module+0x11c/0x2b0
[    2.392954]  __x64_sys_finit_module+0x64/0xd0
[    2.392958]  do_syscall_64+0x5b/0x90
[    2.392961]  ? do_syscall_64+0x67/0x90
[    2.392964]  ? do_syscall_64+0x67/0x90
[    2.392966]  ? do_syscall_64+0x67/0x90
[    2.392969]  ? sysvec_call_function_single+0x4b/0xd0
[    2.392972]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[    2.392977] RIP: 0033:0x7ff88150588d
[    2.392984] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48
[    2.392986] RSP: 002b:00007ffef9db25b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[    2.392990] RAX: ffffffffffffffda RBX: 00005590544f1df0 RCX: 00007ff88150588d
[    2.392992] RDX: 0000000000000000 RSI: 00007ff88169d441 RDI: 0000000000000016
[    2.392993] RBP: 0000000000020000 R08: 0000000000000000 R09: 0000000000000002
[    2.392995] R10: 0000000000000016 R11: 0000000000000246 R12: 00007ff88169d441
[    2.392997] R13: 00005590544f4030 R14: 00005590544f5c10 R15: 00005590544f6ff0
[    2.392999]  </TASK>
[    2.393021] ================================================================================
[    2.394165] [drm] radeon: dpm initialized
[    2.395090] [drm] GART: num cpu pages 262144, num gpu pages 262144
[    2.425952] [drm] PCIE GART of 1024M enabled (table at 0x000000000014C000).
[    2.426006] radeon 0000:01:00.0: WB enabled
[    2.426010] radeon 0000:01:00.0: fence driver on ring 0 use gpu addr 0x0000000040000c00
[    2.426013] radeon 0000:01:00.0: fence driver on ring 3 use gpu addr 0x0000000040000c0c
[    2.426407] radeon 0000:01:00.0: fence driver on ring 5 use gpu addr 0x000000000005c598
[    2.426511] radeon 0000:01:00.0: radeon: MSI limited to 32-bit
[    2.426574] radeon 0000:01:00.0: radeon: using MSI.
[    2.426602] [drm] radeon: irq initialized.
[    2.472785] [drm] ring test on 0 succeeded in 1 usecs
[    2.472794] [drm] ring test on 3 succeeded in 2 usecs
[    2.657384] [drm] ring test on 5 succeeded in 1 usecs
[    2.657397] [drm] UVD initialized successfully.
[    2.657674] [drm] ib test on ring 0 succeeded in 0 usecs
[    2.657692] [drm] ib test on ring 3 succeeded in 0 usecs
...

Hardware:
- Dell Optiplex 380
- Radeon HD 4670
- 8 GB RAM
- Intel Core 2 Duo CPU E8400 3.00GHz
Comment 1 Sergey Belyashov 2024-01-30 08:37:52 UTC
Created attachment 305790 [details]
dmesg output
Comment 2 Artem S. Tashkinov 2024-01-31 10:11:44 UTC
This kernel release is no longer supported.

Take it to your vendor: https://bugs.launchpad.net/ubuntu

Note You need to log in before you can comment on or make changes to this bug.