From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AC18042124B for ; Fri, 24 Jul 2026 22:33:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784932427; cv=none; b=q+eFsXqR17qkjurxprUsNbwkXmeMcwsg+W+htJF8QxBy5y35jdRRdlVwYhDIgkmAZniIBUEgv7OUPRFsvOI6Q/FBjG+mPrEC0f7ieDku0hcsiFP1gd81Do4FqqyrIorK4to1yKSQLyZYVh8ZhsqjlPB2PMv+RoCvUWHoMA0R2yU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784932427; c=relaxed/simple; bh=szexrev2hIx3KQJyn4OnqHb0wG0IPlhLnyXdHL5J3kQ=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=E/IgW9CPHNtOUXiI7VycFacuG+H1ZHgiL0JIh2Ih+m7jVChA4IHRxcfigViYI7prFf2cTxYTfJ5QfRoKK5HWu5IYp5u2dJysjlfr+DU1SjWl1EqiNZL0Asu6TfHDRm4NggC41BCUky1WvUCWND8+gIvF3vsTMj+Xqnql7Tijkf4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=PAA5s4CL; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="PAA5s4CL" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 832431F00A3D; Fri, 24 Jul 2026 22:33:45 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1784932426; bh=2uKWLTHVsd+ZxzUKP4SFUlqG4nD9gp6sPZAZB1Q2kNo=; h=From:To:Cc:Subject:Date; b=PAA5s4CLV5shCBEDz4+Lj4+y7k+IMj2ZokfnfZufcVOcgAAspzyqGutCFYe9GjnLo hBX+osnB0TjajzeQRqwdf36jzZxVsH3uho58gojUXPEFzt9hH3gt9ukKM3OApgdgMk gqrLcoKfr4k4/WiE0B6vl1V09vJvjY+QiS+0m3bLjSIdImESyePms902VvBsmAoMUB P0yW/vv5b+/fSnyqrC0BEhO7+fuIRGvm/d7iT0b/pt2uilKvwZJ2sVN9f2O6rDjEwC Q+SqsmRrFgdQikyWI57ZkC47Q95CpdYdXKj1K4V98ox1DY7vZEJFaPovbrleSWfsKe SieP8nrsSSMFQ== From: srini@kernel.org To: gregkh@linuxfoundation.org Cc: linux-kernel@vger.kernel.org, Srinivas Kandagatla Subject: [PATCH 0/5] fastrpc: fixes for 7.2 Date: Fri, 24 Jul 2026 23:33:36 +0100 Message-ID: <20260724223342.629168-1-srini@kernel.org> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: Srinivas Kandagatla Hi Greg, This series collects a handful of fastrpc fixes that have accumulated on the list. All patches are small, target long-standing issues, and are tagged for stable. The fixes fall into two buckets: Memory leaks: - Audio PD memory pool never registered its initial buffer because pageslen was left at zero, so the pool was always empty and every allocation fell back to the remote heap (patch 1). - fastrpc_device_open() takes a channel ctx reference before allocating a session; the -EBUSY path on session-alloc failure never dropped it (patch 4). - fastrpc_channel_ctx_free() never destroyed ctx_idr, leaking the IDR backing storage on channel teardown (patch 5). Locking / list corruption: - fastrpc_req_munmap() removed the buffer from fl->mmaps only after the DSP unmap returned, allowing two concurrent unmaps to race on the same entry. Detach the buffer under fl->lock first and re-add it if the DSP call fails (patch 2). - The -ERESTARTSYS path in fastrpc_internal_invoke() walked fl->mmaps and spliced it onto cctx->invoke_interrupted_mmaps without holding fl->lock, racing with every other mmaps accessor (patch 3). Please queue for 7.2. Thanks, Srini Anandu Krishnan E (1): misc: fastrpc: fix channel ctx ref leak when session alloc fails Eddie Lin (1): misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free Ekansh Gupta (2): misc: fastrpc: Fix initial memory allocation for Audio PD memory pool misc: fastrpc: Remove buffer from list prior to unmap operation Junrui Luo (1): misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke drivers/misc/fastrpc.c | 27 ++++++++++++++++++--------- 1 file changed, 18 insertions(+), 9 deletions(-) -- 2.53.0