[PATCHv3] dmaengine: ti: omap-dma: turn lch_map into a flexible array
From: Rosen Penev
Date: Thu May 28 2026 - 19:35:38 EST
Convert the separately-allocated lch_map pointer array to a C99
flexible array member at the end of struct omap_dmadev and annotate it
with __counted_by(lch_count). The probe is reordered so platform_data
lookup and the lch_count determination happen before the parent
allocation, letting struct_size() size the FAM and the dedicated
devm_kcalloc() for lch_map go away.
Two allocations collapse into one and the runtime bounds checks from
__counted_by now apply to every lch_map[] access.
Add some fixes reported by Sashiko. Missing return and missing check for
needs_busy_check. Also a free_irq ordering issue.
Assisted-by: Claude:Opus-4.7
Signed-off-by: Rosen Penev <rosenp@xxxxxxxxx>
---
v3: fix sashiko warnings again
v2: fix sashiko warnings
drivers/dma/ti/omap-dma.c | 82 ++++++++++++++++++++-------------------
1 file changed, 42 insertions(+), 40 deletions(-)
diff --git a/drivers/dma/ti/omap-dma.c b/drivers/dma/ti/omap-dma.c
index 55ece7fd0d99..7c46be2755be 100644
--- a/drivers/dma/ti/omap-dma.c
+++ b/drivers/dma/ti/omap-dma.c
@@ -48,7 +48,7 @@ struct omap_dmadev {
const struct omap_dma_config *cfg;
struct notifier_block nb;
struct omap_dma_context context;
- int lch_count;
+ u32 lch_count;
DECLARE_BITMAP(lch_bitmap, OMAP_SDMA_CHANNELS);
struct mutex lch_lock; /* for assigning logical channels */
bool legacy;
@@ -57,7 +57,7 @@ struct omap_dmadev {
unsigned dma_requests;
spinlock_t irq_lock;
uint32_t irq_enable_mask;
- struct omap_chan **lch_map;
+ struct omap_chan *lch_map[] __counted_by(lch_count);
};
struct omap_chan {
@@ -1656,36 +1656,55 @@ static const struct omap_dma_config default_cfg;
static int omap_dma_probe(struct platform_device *pdev)
{
const struct omap_dma_config *conf;
+ struct omap_system_dma_plat_info *plat;
struct omap_dmadev *od;
+ u32 lch_count;
int rc, i, irq;
u32 val;
- od = devm_kzalloc(&pdev->dev, sizeof(*od), GFP_KERNEL);
- if (!od)
- return -ENOMEM;
-
- od->base = devm_platform_ioremap_resource(pdev, 0);
- if (IS_ERR(od->base))
- return PTR_ERR(od->base);
-
conf = of_device_get_match_data(&pdev->dev);
if (conf) {
- od->cfg = conf;
- od->plat = dev_get_platdata(&pdev->dev);
- if (!od->plat) {
+ plat = dev_get_platdata(&pdev->dev);
+ if (!plat) {
dev_err(&pdev->dev, "omap_system_dma_plat_info is missing");
return -ENODEV;
}
} else if (IS_ENABLED(CONFIG_ARCH_OMAP1)) {
- od->cfg = &default_cfg;
-
- od->plat = omap_get_plat_info();
- if (!od->plat)
+ plat = omap_get_plat_info();
+ if (!plat)
return -EPROBE_DEFER;
} else {
return -ENODEV;
}
+ /* Number of available logical channels */
+ if (!pdev->dev.of_node) {
+ lch_count = plat->dma_attr->lch_count;
+ if (unlikely(!lch_count))
+ lch_count = OMAP_SDMA_CHANNELS;
+ } else if (of_property_read_u32(pdev->dev.of_node, "dma-channels", &lch_count)) {
+ dev_info(&pdev->dev, "Missing dma-channels property, using %u.\n",
+ OMAP_SDMA_CHANNELS);
+ lch_count = OMAP_SDMA_CHANNELS;
+ }
+
+ if (lch_count > OMAP_SDMA_CHANNELS) {
+ dev_err(&pdev->dev, "invalid dma-channels value %u\n", lch_count);
+ return -EINVAL;
+ }
+
+ od = devm_kzalloc(&pdev->dev, struct_size(od, lch_map, lch_count), GFP_KERNEL);
+ if (!od)
+ return -ENOMEM;
+
+ od->lch_count = lch_count;
+ od->plat = plat;
+ od->cfg = conf ? conf : &default_cfg;
+
+ od->base = devm_platform_ioremap_resource(pdev, 0);
+ if (IS_ERR(od->base))
+ return PTR_ERR(od->base);
+
od->reg_map = od->plat->reg_map;
dma_cap_set(DMA_SLAVE, od->ddev.cap_mask);
@@ -1730,19 +1749,6 @@ static int omap_dma_probe(struct platform_device *pdev)
OMAP_SDMA_REQUESTS);
}
- /* Number of available logical channels */
- if (!pdev->dev.of_node) {
- od->lch_count = od->plat->dma_attr->lch_count;
- if (unlikely(!od->lch_count))
- od->lch_count = OMAP_SDMA_CHANNELS;
- } else if (of_property_read_u32(pdev->dev.of_node, "dma-channels",
- &od->lch_count)) {
- dev_info(&pdev->dev,
- "Missing dma-channels property, using %u.\n",
- OMAP_SDMA_CHANNELS);
- od->lch_count = OMAP_SDMA_CHANNELS;
- }
-
/* Mask of allowed logical channels */
if (pdev->dev.of_node && !of_property_read_u32(pdev->dev.of_node,
"dma-channel-mask",
@@ -1754,12 +1760,6 @@ static int omap_dma_probe(struct platform_device *pdev)
if (od->plat->dma_attr->dev_caps & HS_CHANNELS_RESERVED)
bitmap_set(od->lch_bitmap, 0, 2);
- od->lch_map = devm_kcalloc(&pdev->dev, od->lch_count,
- sizeof(*od->lch_map),
- GFP_KERNEL);
- if (!od->lch_map)
- return -ENOMEM;
-
for (i = 0; i < od->dma_requests; i++) {
rc = omap_dma_chan_init(od);
if (rc) {
@@ -1828,6 +1828,7 @@ static int omap_dma_probe(struct platform_device *pdev)
if (od->ll123_supported)
dma_pool_destroy(od->desc_pool);
omap_dma_free(od);
+ return rc;
}
}
@@ -1852,17 +1853,18 @@ static void omap_dma_remove(struct platform_device *pdev)
struct omap_dmadev *od = platform_get_drvdata(pdev);
int irq;
- if (od->cfg->may_lose_context)
+ if (od->cfg->needs_busy_check || od->cfg->may_lose_context)
cpu_pm_unregister_notifier(&od->nb);
if (pdev->dev.of_node)
of_dma_controller_free(pdev->dev.of_node);
- irq = platform_get_irq(pdev, 1);
- devm_free_irq(&pdev->dev, irq, od);
-
dma_async_device_unregister(&od->ddev);
+ irq = platform_get_irq(pdev, 1);
+ if (irq > 0)
+ devm_free_irq(&pdev->dev, irq, od);
+
if (!omap_dma_legacy(od)) {
/* Disable all interrupts */
omap_dma_glbl_write(od, IRQENABLE_L0, 0);
--
2.54.0