The command header lives in a BO user space keeps mapped, and the driver both re-reads it on every accessor call and read-modify-writes it in place.
Sent as a series rather than two standalone patches: they touch the same function and do not apply independently. Taimuraz Kaitmazov (2): accel/amdxdna: check the command chain payload before using it accel/amdxdna: use READ_ONCE/WRITE_ONCE on the command header drivers/accel/amdxdna/amdxdna_ctx.c | 65 +++++++++++++++++++++-------- drivers/accel/amdxdna/amdxdna_ctx.h | 13 ++++-- 2 files changed, 57 insertions(+), 21 deletions(-) -- 2.55.0
