Summary: DRM: Set dmah->size in drm_pci_alloc() The missing assignment to dmah->size in drm_pci_alloc() was causing massive memory corruption when the PCI consistent memory block was later freed by drm_pci_free() (size passed to pci_free_consistent() was bogus). https://bugs.freedesktop.org/show_bug.cgi?id=3217 Signed-off-by: Sergey Vlasov --- drm/linux-core/drm_pci.c.alt-drm_pci-fix 2005-05-21 17:19:49 +0400 +++ drm/linux-core/drm_pci.c 2005-05-21 19:10:39 +0400 @@ -82,6 +82,7 @@ drm_dma_handle_t *drm_pci_alloc(drm_devi if (!dmah) return NULL; + dmah->size = size; dmah->vaddr = pci_alloc_consistent(dev->pdev, size, &dmah->busaddr); #if DRM_DEBUG_MEMORY