usb: dwc3: gadget: Don't prepare beyond a transfer
authorThinh Nguyen <Thinh.Nguyen@synopsys.com>
Wed, 6 May 2020 02:47:03 +0000 (19:47 -0700)
committerFelipe Balbi <balbi@kernel.org>
Mon, 25 May 2020 08:09:42 +0000 (11:09 +0300)
Don't prepare TRBs beyond a transfer. In DWC_usb32, its transfer burst
capability may try to read and use TRBs beyond the active transfer. For
other controllers, they don't process the next transfer TRBs until the
current transfer is completed. Explicitly prevent preparing TRBs ahead
for all controllers.

Signed-off-by: Thinh Nguyen <thinhn@synopsys.com>
Signed-off-by: Felipe Balbi <balbi@kernel.org>
drivers/usb/dwc3/gadget.c

index 97c6a57..07824b6 100644 (file)
@@ -1231,6 +1231,14 @@ static void dwc3_prepare_trbs(struct dwc3_ep *dep)
 
                if (!dwc3_calc_trbs_left(dep))
                        return;
+
+               /*
+                * Don't prepare beyond a transfer. In DWC_usb32, its transfer
+                * burst capability may try to read and use TRBs beyond the
+                * active transfer instead of stopping.
+                */
+               if (dep->stream_capable && req->request.is_last)
+                       return;
        }
 }