Re: [PATCH v2] drm/imagination: clamp freelist reconstruction requests

[Brajesh Gupta]

On Sun, 20 Sep 2026 11:43:29 +0800, Pengpeng Hou wrote:
> The firmware reconstruction count controls accesses to the request's
> fixed freelist ID array and the copy into the fixed response array.
> Neither access currently bounds the count to those protocol arrays.
> 
> Clamp the count to the request capacity, which is shared by the response
> layout, and use that count consistently for reconstruction and response
> publication. Keep the firmware recovery exchange instead of dropping an
> oversized request without a response, as discussed with the firmware
> maintainer.
> 
> [...]

Applied to drm-misc-fixes, thanks!

[1/1] drm/imagination: clamp freelist reconstruction requests
      commit: 45585c3aa285854face65293acc95eff73063d6d

Best regards,
-- 
Brajesh Gupta <brajesh.gupta@xxxxxxxxxx>