Re: [PATCH v2] drm/imagination: simplify pvr_fw_trace_seq_data

From: Alexandru Dadu

Date: Wed Oct 21 2026 - 06:03:25 EST


Hi Rosen,

On Mon, 2026-10-05 at 12:41 -0700, Rosen Penev wrote:
> The trace buffer copy always has
> ROGUE_FW_TRACE_BUF_DEFAULT_SIZE_IN_DWORDS
> entries, so embed it in struct pvr_fw_trace_seq_data as a fixed-size
> array instead of allocating it separately. This removes one
> allocation
> and its error handling, and lets FORTIFY_SOURCE and UBSAN_BOUNDS see
> the
> real size of the buffer.
>
> At about 48KB, the struct needs an order-4 page allocation, which can
> fail under memory fragmentation. Allocate it with kvzalloc_obj() so
> it
> falls back to vmalloc in that case, and free it with kvfree().
>
> Assisted-by: LLM
> Signed-off-by: Rosen Penev <rosenp@xxxxxxxxx>

Reviewed-by: Alexandru Dadu <alexandru.dadu@xxxxxxxxxx>

Thanks,
Alexandru Dadu
> ---
>  v2: use kvzalloc_obj()
>  drivers/gpu/drm/imagination/pvr_fw_trace.c | 25 ++++++--------------
> --
>  1 file changed, 7 insertions(+), 18 deletions(-)
>
> diff --git a/drivers/gpu/drm/imagination/pvr_fw_trace.c
> b/drivers/gpu/drm/imagination/pvr_fw_trace.c
> index 6fe478f64f02..27bbc62114b1 100644
> --- a/drivers/gpu/drm/imagination/pvr_fw_trace.c
> +++ b/drivers/gpu/drm/imagination/pvr_fw_trace.c
> @@ -240,9 +240,6 @@ update_logtype(struct pvr_device *pvr_dev, u32
> group_mask)
>  }
>  
>  struct pvr_fw_trace_seq_data {
> - /** @buffer: Pointer to copy of trace data. */
> - u32 *buffer;
> -
>   /** @start_offset: Starting offset in trace data, as
> reported by FW. */
>   u32 start_offset;
>  
> @@ -251,6 +248,9 @@ struct pvr_fw_trace_seq_data {
>  
>   /** @assert_buf: Trace assert buffer, as reported by FW. */
>   struct rogue_fwif_file_info_buf assert_buf;
> +
> + /** @buffer: Copy of trace data. */
> + u32 buffer[ROGUE_FW_TRACE_BUF_DEFAULT_SIZE_IN_DWORDS];
>  };
>  
>  static u32 find_sfid(u32 id)
> @@ -454,17 +454,10 @@ static int fw_trace_open(struct inode *inode,
> struct file *file)
>   struct pvr_fw_trace_seq_data *trace_seq_data;
>   int err;
>  
> - trace_seq_data = kzalloc_obj(*trace_seq_data);
> + trace_seq_data = kvzalloc_obj(*trace_seq_data);
>   if (!trace_seq_data)
>   return -ENOMEM;
>  
> - trace_seq_data->buffer =
> kcalloc(ROGUE_FW_TRACE_BUF_DEFAULT_SIZE_IN_DWORDS,
> - sizeof(*trace_seq_data-
> >buffer), GFP_KERNEL);
> - if (!trace_seq_data->buffer) {
> - err = -ENOMEM;
> - goto err_free_data;
> - }
> -
>   /*
>   * Take a local copy of the trace buffer, as firmware may
> still be
>   * writing to it. This will exist as long as this file is
> open.
> @@ -477,17 +470,14 @@ static int fw_trace_open(struct inode *inode,
> struct file *file)
>  
>   err = seq_open(file, &pvr_fw_trace_seq_ops);
>   if (err)
> - goto err_free_buffer;
> + goto err_free_data;
>  
>   ((struct seq_file *)file->private_data)->private =
> trace_seq_data;
>  
>   return 0;
>  
> -err_free_buffer:
> - kfree(trace_seq_data->buffer);
> -
>  err_free_data:
> - kfree(trace_seq_data);
> + kvfree(trace_seq_data);
>  
>   return err;
>  }
> @@ -498,8 +488,7 @@ static int fw_trace_release(struct inode *inode,
> struct file *file)
>   ((struct seq_file *)file->private_data)->private;
>  
>   seq_release(inode, file);
> - kfree(trace_seq_data->buffer);
> - kfree(trace_seq_data);
> + kvfree(trace_seq_data);
>  
>   return 0;
>  }