From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-dy1-f175.google.com (mail-dy1-f175.google.com [74.125.82.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3E9AF301704 for ; Sat, 23 May 2026 05:06:56 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.82.175 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779512818; cv=none; b=AVI8bVxisqko0h7G/6K32KqpfwrtgHJyLMM9/bzt41lTYHcU8RU+cL1C2nG2tVnyBYCotBWa0hnQqz/TSjzO6JcUgYmphlkbAbLj51yUcjI/j4jDseFVAyuHNrbCmBBpWkJvQ+Nr43XhXzNM1CN0sxITKjai6EJI9lOedTuxFwk= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1779512818; c=relaxed/simple; bh=6e1rj9pQmI2NVnlVXO7bywMrIJiFKSD9Je58nrGA+q8=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=SPwxacMoZbKXuYRgkOgOM1mBuQ8BJ7NLsoB6A1y8ldmhMKK+tgX/Bg7jUnJBKJ1lixZMZ7Wx8xEG7U0HWHgNIECIWLwJfB86KKTozjNx62UK+xPZsnX/4SqAsKtwDM1AC3e1JOIG9gUDsIdbaTmvvL4LBT33n1NuFa8ZFh82cnM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Xaf6lhHH; arc=none smtp.client-ip=74.125.82.175 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Xaf6lhHH" Received: by mail-dy1-f175.google.com with SMTP id 5a478bee46e88-2f30a4601bbso8133093eec.1 for ; Fri, 22 May 2026 22:06:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1779512815; x=1780117615; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=TMrKJOvw6kEjwpBuF6gaRm9aW0Ujd/cJV12X/xp77Po=; b=Xaf6lhHH9Es8HN/J95veREZ0NWfGov8ZXSPbEhac6pZgNHsjwDxHL6Q1/qrKrnGVRy uNSMSdm5LkMSIbsf5Xoj/FHOsUHHzp8WDyf2stQ0bDO471a+A6VvtTxoDcOv3TYQkONK Fs1pck2WXWIJyUib4AqpjliZvs1TAXaegkSssTNeV8s1k9nIYA1vsbkrOndlSqlL0XCo XVqlH7OWstbMDB/8mjPTHOjkLXTqkQW0KC28TkfP5lDWqrFyzWp/SPgP3QIr/yYcHeKs UJ+5xucWkGzwvzuGxppDFPquShaCQbqUJH6Ey9dJbfTIJQDgPFqHF54IGPzBVojleQ9z Ik8A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1779512815; x=1780117615; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=TMrKJOvw6kEjwpBuF6gaRm9aW0Ujd/cJV12X/xp77Po=; b=pV9wBWA5ua8ueMBoEfMKcvjXm1EOTDOpcXj25lRB7uBqib4fD+UDhStdlJtxpNgYlO MwcNE7Qv+AWp1p+vc4MEeXrIcca2rwkbI+NyGxkIJi3MFVb8Gu+JmpFctAEWYpUlODPV pVcm5u9Uh1ImqYy9U9bvayB59cboLna5PibD4Z+ZAgUUDbIhX3MNjSZttrG1IdDF/rRU Wo62cMp+5pKQKPXuDDYSHvn2dC7TAt8qseZPWkG9cY8TdClRFgK1a3HfpyehtEiDQnH0 TlKEZOMfmqh6/mxFqnVRT6BL1COgBjQkZOYTiG/DdYN7F4FhIUINxz5xiKz1Pdl50QgW 7KCA== X-Forwarded-Encrypted: i=1; AFNElJ9APTJyotAihmoHgG5bA+B4OxU9L88G+BFBjHTW1LBPRhcXhVpHUJ3PLBf8KY5wnXkRCHd8t62131iHTtY=@vger.kernel.org X-Gm-Message-State: AOJu0Yz60rOeNsHb2F2UmJMM853LiAHgZn1eLUIvfdyIWKWpxNNeTqaT ip2LOJcNYDHtZDaeEfl78BkfWoEknUpAu8CjQtlQajeyZntO7d7N4cNe X-Gm-Gg: Acq92OExO8miVibxbxlnW7nYUvhs9YJNS1sooQ1A6rbg22OnGyQI3Z3pO0gJrh0vvOo gASUfIeSkcpufQMCpoVgooOgSyZ6oATwPGwcI1M9BGqwr5klPOFysI23DpCuQCvhvnHppqdA7F/ j8F3Gl2oWfrdzpEYY5klvZIYRkcj7DWnGyEYl+VqoGyPjbnivQLNrj+OUPN2Zt60ngpK95n/gFR rG+Ub2bBh5zgAqmLKL4KJDMS/cTQcJY2RCFUP5+Y4MGqU5wJxYC5VVnmfzASutXhkyGkPqVU/v6 SaCCUrwEqffXXal+jAiY+lsQG4CEeWvmc7z0saj57CZ0rGbpJ6S3/ktmEDQNilGqgwO83h2uhyr z2aG/8WHV4fsIIFr8pxXSkRv+FcLlAuCUw7DQwGC8U7cMy+Y5jMNsYs39ocOz8nVWfSs+Cpnzoj TQ77SDZh6kxaP/k0nuJoZR/aQN3OB6CnIjiPIA2W66aXEfhGY0JJYoa3t2j5NNOM8xaW8bRT23O 59OsYUtafmc+Q== X-Received: by 2002:a05:7300:434a:b0:304:2e9b:8f57 with SMTP id 5a478bee46e88-304491337bemr3631797eec.34.1779512815376; Fri, 22 May 2026 22:06:55 -0700 (PDT) Received: from dtor-ws.sjc.corp.google.com ([2a00:79e0:2ebe:8:7e45:2bd:3c86:d34a]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30451f3feadsm3502583eec.13.2026.05.22.22.06.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 22 May 2026 22:06:54 -0700 (PDT) From: Dmitry Torokhov To: linux-input@vger.kernel.org Cc: Thomas Fourier , Seungjin Bae , linux-kernel@vger.kernel.org, stable@vger.kernel.org, Sashiko bot Subject: [PATCH 09/11] Input: ims-pcu - fix DMA mapping violation in line setup Date: Fri, 22 May 2026 22:06:27 -0700 Message-ID: <20260523050634.501509-9-dmitry.torokhov@gmail.com> X-Mailer: git-send-email 2.54.0.746.g67dd491aae-goog In-Reply-To: <20260523050634.501509-1-dmitry.torokhov@gmail.com> References: <20260523050634.501509-1-dmitry.torokhov@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit In ims_pcu_line_setup(), the driver uses pcu->cmd_buf as a transfer buffer for usb_control_msg(). However, pcu->cmd_buf is embedded in the struct ims_pcu allocation, which violates DMA mapping rules regarding cacheline alignment. Use a heap-allocated buffer for the line coding data instead. Fixes: 628329d52474 ("Input: add IMS Passenger Control Unit driver") Cc: stable@vger.kernel.org Reported-by: Sashiko bot Assisted-by: Gemini:gemini-3.1-pro Signed-off-by: Dmitry Torokhov --- drivers/input/misc/ims-pcu.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/drivers/input/misc/ims-pcu.c b/drivers/input/misc/ims-pcu.c index 23e576500890..3b119bc81c85 100644 --- a/drivers/input/misc/ims-pcu.c +++ b/drivers/input/misc/ims-pcu.c @@ -1790,11 +1790,16 @@ static void ims_pcu_stop_io(struct ims_pcu *pcu) static int ims_pcu_line_setup(struct ims_pcu *pcu) { struct usb_host_interface *interface = pcu->ctrl_intf->cur_altsetting; - struct usb_cdc_line_coding *line = (void *)pcu->cmd_buf; + struct usb_cdc_line_coding *line __free(kfree) = + kmalloc(sizeof(*line), GFP_KERNEL); int error; - memset(line, 0, sizeof(*line)); + if (!line) + return -ENOMEM; + line->dwDTERate = cpu_to_le32(57600); + line->bCharFormat = USB_CDC_1_STOP_BITS; + line->bParityType = USB_CDC_NO_PARITY; line->bDataBits = 8; error = usb_control_msg(pcu->udev, usb_sndctrlpipe(pcu->udev, 0), -- 2.54.0.746.g67dd491aae-goog