diff mbox

[PATCH/RFC,2/8] serial: sh-sci: Fix scatterlist mapping leak

Message ID 1432145174-11534-3-git-send-email-geert+renesas@glider.be (mailing list archive)
State RFC
Delegated to: Geert Uytterhoeven
Headers show

Commit Message

Geert Uytterhoeven May 20, 2015, 6:06 p.m. UTC
The mapped scatterlist is never unmapped. This leaks quite some
mappings, as the mapping is done in uart_ops.startup(), i.e. every time
the device is opened. Unmap the scatterlist on device close.

Note that we have to restore the original DMA entry length and DMA
address, as it has been modified in work_fn_tx(). Else warnings are
printed if CONFIG_DMA_API_DEBUG=y:

    WARNING: CPU: 0 PID: 20 at lib/dma-debug.c:1103 check_unmap+0x24c/0x85c()
    rcar-dmac e6700000.dma-controller: DMA-API: device driver frees DMA memory with different size [device address=0x000000006e15f000] [map size=4096 bytes] [unmap size=3 bytes]

and:

    WARNING: CPU: 0 PID: 1364 at lib/dma-debug.c:1093 check_unmap+0x178/0x85c()
    rcar-dmac e6700000.dma-controller: DMA-API: device driver tries to free DMA memory it has not allocated [device address=0x000000006e16b006] [size=4096 bytes]

Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
---
As the transmit scatterlist contains one single entry, which is reused
and modified, I think it's better to use dma_{,un}map_single() instead
of dma_{,un}map_sg(). But that requires more invasive changes.
---
 drivers/tty/serial/sh-sci.c | 8 ++++++++
 1 file changed, 8 insertions(+)

Comments

Laurent Pinchart May 23, 2015, 7:04 p.m. UTC | #1
Hi Geert,

Thank you for the patch.

On Wednesday 20 May 2015 20:06:08 Geert Uytterhoeven wrote:
> The mapped scatterlist is never unmapped. This leaks quite some
> mappings, as the mapping is done in uart_ops.startup(), i.e. every time
> the device is opened. Unmap the scatterlist on device close.
> 
> Note that we have to restore the original DMA entry length and DMA
> address, as it has been modified in work_fn_tx(). Else warnings are
> printed if CONFIG_DMA_API_DEBUG=y:
> 
>     WARNING: CPU: 0 PID: 20 at lib/dma-debug.c:1103
> check_unmap+0x24c/0x85c() rcar-dmac e6700000.dma-controller: DMA-API:
> device driver frees DMA memory with different size [device
> address=0x000000006e15f000] [map size=4096 bytes] [unmap size=3 bytes]
> 
> and:
> 
>     WARNING: CPU: 0 PID: 1364 at lib/dma-debug.c:1093
> check_unmap+0x178/0x85c() rcar-dmac e6700000.dma-controller: DMA-API:
> device driver tries to free DMA memory it has not allocated [device
> address=0x000000006e16b006] [size=4096 bytes]
> 
> Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
> ---
> As the transmit scatterlist contains one single entry, which is reused
> and modified, I think it's better to use dma_{,un}map_single() instead
> of dma_{,un}map_sg(). But that requires more invasive changes.

It would indeed be more invasive, but I think it would be cleaner. Can we go 
that way directly ? Modifying the address and length in work_fn_tx() is a big 
hack.

> ---
>  drivers/tty/serial/sh-sci.c | 8 ++++++++
>  1 file changed, 8 insertions(+)
> 
> diff --git a/drivers/tty/serial/sh-sci.c b/drivers/tty/serial/sh-sci.c
> index 8756d186e86891ac..0aec66cf68615972 100644
> --- a/drivers/tty/serial/sh-sci.c
> +++ b/drivers/tty/serial/sh-sci.c
> @@ -1390,6 +1390,14 @@ static void sci_tx_dma_release(struct sci_port *s,
> bool enable_pio)
> 
>  	s->chan_tx = NULL;
>  	s->cookie_tx = -EINVAL;
> +	if (s->sg_len_tx) {
> +		/* Restore sg_dma_len() and sg_dma_address() */
> +		sg_dma_len(&s->sg_tx) = UART_XMIT_SIZE;
> +		sg_dma_address(&s->sg_tx) = sg_dma_address(&s->sg_tx) &
> +					    ~(UART_XMIT_SIZE - 1);
> +		dma_unmap_sg(chan->device->dev, &s->sg_tx, 1, DMA_TO_DEVICE);
> +		s->sg_len_tx = 0;
> +	}
>  	dma_release_channel(chan);
>  	if (enable_pio)
>  		sci_start_tx(port);
diff mbox

Patch

diff --git a/drivers/tty/serial/sh-sci.c b/drivers/tty/serial/sh-sci.c
index 8756d186e86891ac..0aec66cf68615972 100644
--- a/drivers/tty/serial/sh-sci.c
+++ b/drivers/tty/serial/sh-sci.c
@@ -1390,6 +1390,14 @@  static void sci_tx_dma_release(struct sci_port *s, bool enable_pio)
 
 	s->chan_tx = NULL;
 	s->cookie_tx = -EINVAL;
+	if (s->sg_len_tx) {
+		/* Restore sg_dma_len() and sg_dma_address() */
+		sg_dma_len(&s->sg_tx) = UART_XMIT_SIZE;
+		sg_dma_address(&s->sg_tx) = sg_dma_address(&s->sg_tx) &
+					    ~(UART_XMIT_SIZE - 1);
+		dma_unmap_sg(chan->device->dev, &s->sg_tx, 1, DMA_TO_DEVICE);
+		s->sg_len_tx = 0;
+	}
 	dma_release_channel(chan);
 	if (enable_pio)
 		sci_start_tx(port);