bus: mhi: ep: Update read pointer only after buffer is written
Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated read pointer before the buffer is actually written. Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element, resulting in data corruption. Invoke the buffer write before updating rd_offset to ensure the element is fully written before signaling its availability. Fixes: bbdcba57 ("bus: mhi: ep: Add support for ring management") cc: stable@vger.kernel.org Co-developed-by:Youssef Samir <quic_yabdulra@quicinc.com> Signed-off-by:
Youssef Samir <quic_yabdulra@quicinc.com> Signed-off-by:
Sumit Kumar <quic_sumk@quicinc.com> Reviewed-by:
Jeff Hugo <jeff.hugo@oss.qualcomm.com> Reviewed-by:
Krishna Chaitanya Chundru <krishna.chundru@oss.qualcomm.com> Reviewed-by:
Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org> Link: https://patch.msgid.link/20250409-rp_fix-v1-1-8cf1fa22ed28@quicinc.com Signed-off-by:
Manivannan Sadhasivam <manivannan.sadhasivam@linaro.org>
Loading
Please sign in to comment