net: ipa: fix page free in ipa_endpoint_trans_release()
authorAlex Elder <elder@linaro.org>
Thu, 26 May 2022 15:23:13 +0000 (10:23 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 9 Jun 2022 08:30:55 +0000 (10:30 +0200)
commit 155c0c90bca918de6e4327275dfc1d97fd604115 upstream.

Currently the (possibly compound) page used for receive buffers are
freed using __free_pages().  But according to this comment above the
definition of that function, that's wrong:
    If you want to use the page's reference count to decide when
    to free the allocation, you should allocate a compound page,
    and use put_page() instead of __free_pages().

Convert the call to __free_pages() in ipa_endpoint_trans_release()
to use put_page() instead.

Fixes: ed23f02680caa ("net: ipa: define per-endpoint receive buffer size")
Signed-off-by: Alex Elder <elder@linaro.org>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/ipa/ipa_endpoint.c

index 55322800ba58e22953280110b72804a303a8d92e..158235f649fedb4a670035cf24b862624160e3bc 100644 (file)
@@ -1385,11 +1385,8 @@ void ipa_endpoint_trans_release(struct ipa_endpoint *endpoint,
        } else {
                struct page *page = trans->data;
 
-               if (page) {
-                       u32 buffer_size = endpoint->data->rx.buffer_size;
-
-                       __free_pages(page, get_order(buffer_size));
-               }
+               if (page)
+                       put_page(page);
        }
 }