remoteproc: Fix wrong rvring index computation
authorClement Leger <cleger@kalray.eu>
Fri, 4 Oct 2019 07:37:36 +0000 (09:37 +0200)
committerBjorn Andersson <bjorn.andersson@linaro.org>
Tue, 12 Nov 2019 06:55:54 +0000 (22:55 -0800)
Index of rvring is computed using pointer arithmetic. However, since
rvring->rvdev->vring is the base of the vring array, computation
of rvring idx should be reversed. It previously lead to writing at negative
indices in the resource table.

Signed-off-by: Clement Leger <cleger@kalray.eu>
Link: https://lore.kernel.org/r/20191004073736.8327-1-cleger@kalray.eu
Signed-off-by: Bjorn Andersson <bjorn.andersson@linaro.org>
drivers/remoteproc/remoteproc_core.c

index c5689be3ebe2cf3e09e87d5c47177bf9eacc296e..307df98347ba24188d196e11f4cc29f3e7667202 100644 (file)
@@ -399,7 +399,7 @@ rproc_parse_vring(struct rproc_vdev *rvdev, struct fw_rsc_vdev *rsc, int i)
 void rproc_free_vring(struct rproc_vring *rvring)
 {
        struct rproc *rproc = rvring->rvdev->rproc;
-       int idx = rvring->rvdev->vring - rvring;
+       int idx = rvring - rvring->rvdev->vring;
        struct fw_rsc_vdev *rsc;
 
        idr_remove(&rproc->notifyids, rvring->notifyid);