nvkms-hdmi.c: hblankMin overflows 32 bits and ignores lane count / FRL coding for 3-lane DSC configs

Aperta
  • Qualcosa non va?
#1,445 1 commento 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
3/5
Tempo stimato
1-2 giorni
Idoneità per principianti
52/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
c
Ambito
operating-systems

Direzione di ricerca

The bug is in pDscInfo->hdmi.hblankMin inside nvHdmiFrlQueryConfigOneColorFormatAndBpc() in src/nvidia-modeset/src/nvkms-hdmi.c. Read how GetHdmiFrlLinkRate() maps the FRL rate to lanes, then check that the numerator is computed in 64 bits and the divisor uses the lane count and 16b/18b coding. Done when the 3L6G example (1697380 kHz, dscHBlankTriBytes 72) yields about 184 instead of 2. No test file is named, so verify with the logged values in the issue.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

Summary

nvHdmiFrlQueryConfigOneColorFormatAndBpc() in src/nvidia-modeset/src/nvkms-hdmi.c computes pDscInfo->hdmi.hblankMin with two arithmetic errors:

  1. 32-bit overflow. The numerator is evaluated in 32 bits and wraps for typical high-refresh 4K modes.
  2. Wrong tri-byte rate for 3-lane FRL configs. The divisor assumes 4 lanes and ignores 16b/18b FRL coding.

I found these while debugging a separate HDMI audio problem (filed as #1446). Fixing them did not fix that audio problem, so this is reported as its own bug, with no claim that it explains the audio loss.

Affected code

pDscInfo->hdmi.hblankMin =
    NV_UNSIGNED_DIV_CEIL(((pHwTimings->pixelClock * 1000) *
                              pConfig->dscInfo.dscHBlankTriBytes),
                         (hdmiLinkRate / 6));
1. Overflow

pixelClock is in kHz (NvU32). pixelClock * 1000 * dscHBlankTriBytes is computed in 32 bits.

Example: a 3840x2160 @ 165 Hz mode with a 1697380 kHz pixel clock and dscHBlankTriBytes = 72 gives 1,697,380,000 x 72, which wraps in 32 bits. The result was hblankMin = 2 instead of roughly 122 to 184.

2. Lane count and FRL coding

GetHdmiFrlLinkRate() returns the per-lane rate, and / 6 corresponds to 4 lanes x rate / 24 bits per tri-byte. For the 3-lane rates (3LANES_3GBPS, 3LANES_6GBPS) the divisor should use 3 lanes. FRL 16b/18b character coding is not accounted for either.

For 3L6G the actual tri-byte rate is 6e9 x 3 x (16/18) / 24, about 6.67e8 per second. 72 tri-bytes then need about 108 ns, which is about 184 pixel times at 1697 MHz.

Observed values

Instrumented stock code, 3840x2160 @ 165 Hz, 10 bpc, FRL 3L6G, DSC:

frlcfg pclkKHz=1697380 raster=4400x2338 frlRate=2 (3LANES_6GBPS) dsc=1 hcBlankTri=72 tBlankRatioX1k=30 hblankMin=2
hblank rasterX=4400 hBlank=560 hblankMin=2 tBlankRatioX1k=30 target=132

With the fix below, hblankMin is about 184 for this config. For 4L6G (HCblank = 280 tri-bytes) it comes out at 535.

In this case max(hblankMin, rasterX * tBlankRatio / 1000) currently masks the error (target = 132). After the correction the target is 184. Other modes or sinks may not be masked.

Suggested fix

{
    const NvU64 frlLanes =
        ((pConfig->frlRate == HDMI_FRL_DATA_RATE_3LANES_3GBPS) ||
         (pConfig->frlRate == HDMI_FRL_DATA_RATE_3LANES_6GBPS)) ? 3 : 4;
    /* tri-bytes/s = laneRate * lanes * (16/18) / 24 */
    const NvU64 triBytesPerSec = (hdmiLinkRate * frlLanes * 16) / (18 * 24);
    const NvU64 pixelClockHz = (NvU64)pHwTimings->pixelClock * 1000;

    pDscInfo->hdmi.hblankMin = (NvU32)
        NV_UNSIGNED_DIV_CEIL(pixelClockHz * pConfig->dscInfo.dscHBlankTriBytes,
                             triBytesPerSec);
}

Tested: builds and runs on 615.78.08 with GB203. Video is unaffected, and the logged values match the hand calculation. I could only test the 3L6G and 4L6G configs on one sink.

Environment

  • Driver: 615.78.08 (open kernel modules)
  • GPU: GeForce RTX 5090 Laptop GPU (GB203)
  • Display: Samsung Odyssey Ark over HDMI 2.1 (max FRL 4x10G, DSC 1.2a)
  • Kernel: 7.2.9, Fedora 44 based (Bazzite)
Lingua principale
C
Stelle
17.5k
Fork
1.9k
Nessuna PR unita negli ultimi 30g

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di NVIDIA/open-gpu-kernel-modules

Tutte le issue di NVIDIA/open-gpu-kernel-modules

Issue simili

Altre issue su C

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.