]> Gentwo Git Trees - linux/.git/commit
drm/amdgpu/ttm: Fix crash when handling MMIO_REMAP in PDE flags
authorSrinivasan Shanmugam <srinivasan.shanmugam@amd.com>
Tue, 18 Nov 2025 08:58:33 +0000 (14:28 +0530)
committerAlex Deucher <alexander.deucher@amd.com>
Wed, 19 Nov 2025 23:08:37 +0000 (18:08 -0500)
commit21f46f54769c45ac8ca0dbaa977bc1b436ffdee2
tree25e83a35948dc4b3a36d3b32018c6ba7b0548cd2
parenta44592339397bc6715917997c6869bdedd1a7256
drm/amdgpu/ttm: Fix crash when handling MMIO_REMAP in PDE flags

The MMIO_REMAP BO is a special 4K IO page that does not have a ttm_tt
behind it. However, amdgpu_ttm_tt_pde_flags() was treating it like
normal TT/doorbell/preempt memory and unconditionally accessed
ttm->caching. For the MMIO_REMAP BO, ttm is NULL, so this leads to a
NULL pointer dereference when computing PDE flags.

Fix this by checking that ttm is non-NULL before reading ttm->caching.
This prevents the crash for MMIO_REMAP and also makes the code more
defensive if other BOs ever come through without a ttm_tt.

Fixes: fb5a52dbe9fe ("drm/amdgpu: Implement TTM handling for MMIO_REMAP placement")
Suggested-by: Jesse Zhang <Jesse.Zhang@amd.com>
Suggested-by: Christian König <christian.koenig@amd.com>
Cc: Alex Deucher <alexander.deucher@amd.com>
Signed-off-by: Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
Reviewed-by: Jesse Zhang <Jesse.Zhang@amd.com>
Tested-by: Jesse Zhang <Jesse.Zhang@amd.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
(cherry picked from commit 0db94da5a0a1cacda080b9ec8425fcbe4babc141)
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c