diff options
| author | Franck LENORMAND <franck.lenormand@nxp.com> | 2020-03-26 00:00:05 +0200 |
|---|---|---|
| committer | Shawn Guo <shawnguo@kernel.org> | 2020-04-23 22:35:02 +0800 |
| commit | f5f27b79eab80de0287c243a22169e4876b08d5e (patch) | |
| tree | 0d9d2fa2db2bb6c1904270c79c58194f81993f31 /include/dt-bindings | |
| parent | f25a066d1a07affb7bea4e5d9c179c3338338e23 (diff) | |
firmware: imx: scu: Fix corruption of header
The header of the message to send can be changed if the
response is longer than the request:
- 1st word, the header is sent
- the remaining words of the message are sent
- the response is received asynchronously during the
execution of the loop, changing the size field in
the header
- the for loop test the termination condition using
the corrupted header
It is the case for the API build_info which has just a
header as request but 3 words in response.
This issue is fixed storing the header locally instead of
using a pointer on it.
Fixes: edbee095fafb (firmware: imx: add SCU firmware driver support)
Signed-off-by: Franck LENORMAND <franck.lenormand@nxp.com>
Reviewed-by: Leonard Crestez <leonard.crestez@nxp.com>
Signed-off-by: Leonard Crestez <leonard.crestez@nxp.com>
Cc: stable@vger.kernel.org
Reviewed-by: Dong Aisheng <aisheng.dong@nxp.com>
Signed-off-by: Shawn Guo <shawnguo@kernel.org>
Diffstat (limited to 'include/dt-bindings')
0 files changed, 0 insertions, 0 deletions