On Tue, Feb 10, 2026 at 09:35:27AM +0100, Thomas Fourier wrote:
> The gpummu->table buffer is alloc'd with size TABLE_SIZE + 32 in
> a2xx_gpummu_new() but freed with size TABLE_SIZE in
> a2xx_gpummu_destroy().
>
> Change the free size to match the allocation.
>
> Fixes: c2052a4e5c99 ("drm/msm: implement a2xx mmu")
> Cc: <[email protected]>
> Signed-off-by: Thomas Fourier <[email protected]>
> ---
> drivers/gpu/drm/msm/adreno/a2xx_gpummu.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
Note, your subject is preffix is wrong. Could you please correct it?
> diff --git a/drivers/gpu/drm/msm/adreno/a2xx_gpummu.c
> b/drivers/gpu/drm/msm/adreno/a2xx_gpummu.c
> index 0407c9bc8c1b..4467b04527cd 100644
> --- a/drivers/gpu/drm/msm/adreno/a2xx_gpummu.c
> +++ b/drivers/gpu/drm/msm/adreno/a2xx_gpummu.c
> @@ -78,7 +78,7 @@ static void a2xx_gpummu_destroy(struct msm_mmu *mmu)
> {
> struct a2xx_gpummu *gpummu = to_a2xx_gpummu(mmu);
>
> - dma_free_attrs(mmu->dev, TABLE_SIZE, gpummu->table, gpummu->pt_base,
> + dma_free_attrs(mmu->dev, TABLE_SIZE + 32, gpummu->table,
> gpummu->pt_base,
> DMA_ATTR_FORCE_CONTIGUOUS);
>
> kfree(gpummu);
> --
> 2.43.0
>
--
With best wishes
Dmitry
