Re: [PATCH] fix: drm/tegra: tegra_dc_pin: chunks>1 error path leaks current mapping from host1x_bo_pin

[WenTao Liang]

> 2026年6月26日 22:49，WenTao Liang <vulab@xxxxxxxxxxx> 写道：
> 
> When map->chunks > 1 triggers an error, the function jumps to unpin
>  before storing the current map in state->map[i]. The unpin loop only
>  cleans up previously pinned planes (indices 0 through i-1), so the
>  current mapping returned by host1x_bo_pin is never released via
>  host1x_bo_unpin.
> 
> Cc: stable@xxxxxxxxxxxxxxx
> Fixes: c6aeaf56f468 ("drm/tegra: Implement correct DMA-BUF semantics")
> Signed-off-by: WenTao Liang <vulab@xxxxxxxxxxx>
> ---
> drivers/gpu/drm/tegra/plane.c | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/drivers/gpu/drm/tegra/plane.c b/drivers/gpu/drm/tegra/plane.c
> index 0cb30910773f..e61485ee58f6 100644
> --- a/drivers/gpu/drm/tegra/plane.c
> +++ b/drivers/gpu/drm/tegra/plane.c
> @@ -161,6 +161,7 @@ static int tegra_dc_pin(struct tegra_dc *dc, struct tegra_plane_state *state)
> 			 */
> 			if (map->chunks > 1) {
> 				err = -EINVAL;
> +				host1x_bo_unpin(map);
> 				goto unpin;
> 			}
> 
> -- 
> 2.39.5 (Apple Git-154)

Please ignore this patch. I will resend a proper version after
learning the kernel submission process.

Apologies for the noise.

Best regards,
WenTao Liang