mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-29 03:01:39 -04:00
rapidio/tsi721: fix queue wrapping bug in inbound doorbell handler
Fix a bug that causes a kernel panic when the number of received doorbells is larger than number of entries in the inbound doorbell queue (current default value = 512). Another possible indication for this bug is large number of spurious doorbells reported by tsi721 driver after reaching the queue size maximum. Signed-off-by: Alexandre Bounine <[email protected]> Cc: Chul Kim <[email protected]> Cc: Matt Porter <[email protected]> Cc: <[email protected]> [3.2.x+] Signed-off-by: Andrew Morton <[email protected]> Signed-off-by: Linus Torvalds <[email protected]>
This commit is contained in:
parent
e6ca7b89dc
commit
b24823e61b
1 changed files with 3 additions and 2 deletions
|
|
@ -410,13 +410,14 @@ static void tsi721_db_dpc(struct work_struct *work)
|
|||
*/
|
||||
mport = priv->mport;
|
||||
|
||||
wr_ptr = ioread32(priv->regs + TSI721_IDQ_WP(IDB_QUEUE));
|
||||
rd_ptr = ioread32(priv->regs + TSI721_IDQ_RP(IDB_QUEUE));
|
||||
wr_ptr = ioread32(priv->regs + TSI721_IDQ_WP(IDB_QUEUE)) % IDB_QSIZE;
|
||||
rd_ptr = ioread32(priv->regs + TSI721_IDQ_RP(IDB_QUEUE)) % IDB_QSIZE;
|
||||
|
||||
while (wr_ptr != rd_ptr) {
|
||||
idb_entry = (u64 *)(priv->idb_base +
|
||||
(TSI721_IDB_ENTRY_SIZE * rd_ptr));
|
||||
rd_ptr++;
|
||||
rd_ptr %= IDB_QSIZE;
|
||||
idb.msg = *idb_entry;
|
||||
*idb_entry = 0;
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue