Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free()

The input buffer size is pcu->max_in_size, but pcu->max_out_size is
passed to usb_free_coherent().

Change size to match the allocation size.

Fixes: 628329d52474 ("Input: add IMS Passenger Control Unit driver")
Cc: stable@vger.kernel.org
Signed-off-by: Thomas Fourier <fourier.thomas@gmail.com>
Link: https://patch.msgid.link/20260522085412.45430-2-fourier.thomas@gmail.com
Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>

diff --git a/drivers/input/misc/ims-pcu.c b/drivers/input/misc/ims-pcu.c
index 4c022a36dbe844ec340d05f52555e0649dc45c64..7a1cb9333f53cb0ea594c8fd672041a60f6622b5 100644 (file)
--- a/drivers/input/misc/ims-pcu.c
+++ b/drivers/input/misc/ims-pcu.c
@@ -1624,7 +1624,7 @@ static void ims_pcu_buffers_free(struct ims_pcu *pcu)
        usb_kill_urb(pcu->urb_in);
        usb_free_urb(pcu->urb_in);
 
-       usb_free_coherent(pcu->udev, pcu->max_out_size,
+       usb_free_coherent(pcu->udev, pcu->max_in_size,
                          pcu->urb_in_buf, pcu->read_dma);
 
        kfree(pcu->urb_out_buf);