Claude review: drm/amdkfd: fix NULL dereference in get_queue_ids()

[Claude Code Review Bot <claude-review@example.com>]

Overall Series Review

Subject: drm/amdkfd: fix NULL dereference in get_queue_ids()
Author: Muhammad Bilal <meatuni001@gmail.com>
Patches: 2
Reviewed: 2026-05-25T17:31:37.605877

---

This is a two-patch series from Muhammad Bilal fixing two distinct security bugs in `get_queue_ids()` in the amdkfd debug-trap queue suspend/resume path. Both `num_queues` and `queue_array_ptr` are user-controlled via `kfd_ioctl_set_debug_trap()` (confirmed at `kfd_chardev.c:3225-3234`), making both bugs userspace-triggerable.

**Patch ordering**: The integer overflow fix (earlier Message-ID) is the base; the NULL dereference fix (In-Reply-To the first) is an incremental follow-up. Both patches are small, correct, and well-justified.

**Verdict**: Both patches are correct and should be applied. The commit messages are thorough and accurate. The only nit is that `suspend_queues()` has a pre-existing asymmetry with `resume_queues()` in how it handles the `copy_to_user`/`kfree` tail — but that is outside the scope of these fixes and not a regression.

---

---
Generated by Claude Code Patch Reviewer