From mboxrd@z Thu Jan 1 00:00:00 1970 From: Claude Code Review Bot To: dri-devel-reviews@example.com Subject: Claude review: drm/lease: Limit amount of maximum objects per lease. Date: Thu, 28 May 2026 12:30:53 +1000 Message-ID: In-Reply-To: References: X-Mailer: Claude Code Patch Reviewer Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit MIME-Version: 1.0 Overall Series Review Subject: drm/lease: Limit amount of maximum objects per lease. Author: Maarten Lankhorst Patches: 1 Reviewed: 2026-05-28T12:30:53.798502 --- This is a single-patch fix for a syzkaller-reported bug where userspace can pass an arbitrarily large `object_count` to the `DRM_IOCTL_MODE_CREATE_LEASE` ioctl, causing `kzalloc_objs()` inside `fill_object_idr()` to attempt an allocation that exceeds `MAX_PAGE_ORDER`, triggering a `WARN_ON` in the page allocator. The fix caps `object_count` to 96 (the sum of the bit widths of the three relevant 32-bit mask types). The approach is sound and correctly placed, but there are a couple of issues that should be addressed before merging. **Verdict: Needs minor fixes before applying.** --- --- Generated by Claude Code Patch Reviewer