On Sun, Oct 4, 2026 at 11:27 PM Tan Chi <[email protected]> wrote:
>
> riscv_iommu_translate() allocates an IOATC entry before passing it to
> riscv_iommu_iot_update(). The update helper normally transfers ownership
> to the hash table.
>
> When ioatc-limit is zero, however, the helper returns without inserting or
> freeing the entry. Every cacheable non-identity translation therefore leaks
> one RISCVIOMMUEntry.
>
> Free the entry on the disabled-cache path so that
> riscv_iommu_iot_update() consistently consumes the entry passed to it.
>
> Fixes: 9d085a1c3cb2 ("hw/riscv/riscv-iommu: add Address Translation Cache 
> (IOATC)")
> Cc: [email protected]
> Signed-off-by: Tan Chi <[email protected]>
> ---
>  hw/riscv/riscv-iommu.c | 1 +
>  1 file changed, 1 insertion(+)
>

Reviewed-by: Bin Meng <[email protected]>

Reply via email to