From: Bart Van Assche <bvanass...@acm.org>

[ Upstream commit eacf36f5bebde5089dddb3d5bfcbeab530b01f8a ]

Starting execution of a command before tracing a command may cause the
completion handler to free data while it is being traced. Fix this race by
tracing a command before it is submitted.

Cc: Bean Huo <bean...@micron.com>
Cc: Can Guo <c...@codeaurora.org>
Cc: Avri Altman <avri.alt...@wdc.com>
Cc: Stanley Chu <stanley....@mediatek.com>
Cc: Tomas Winkler <tomas.wink...@intel.com>
Link: https://lore.kernel.org/r/20191224220248.30138-5-bvanass...@acm.org
Reviewed-by: Alim Akhtar <alim.akh...@samsung.com>
Signed-off-by: Bart Van Assche <bvanass...@acm.org>
Signed-off-by: Martin K. Petersen <martin.peter...@oracle.com>
Signed-off-by: Sasha Levin <sas...@kernel.org>
---
 drivers/scsi/ufs/ufshcd.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/scsi/ufs/ufshcd.c b/drivers/scsi/ufs/ufshcd.c
index faf1959981784..b2cbdd01ab10b 100644
--- a/drivers/scsi/ufs/ufshcd.c
+++ b/drivers/scsi/ufs/ufshcd.c
@@ -1910,12 +1910,12 @@ void ufshcd_send_command(struct ufs_hba *hba, unsigned 
int task_tag)
 {
        hba->lrb[task_tag].issue_time_stamp = ktime_get();
        hba->lrb[task_tag].compl_time_stamp = ktime_set(0, 0);
+       ufshcd_add_command_trace(hba, task_tag, "send");
        ufshcd_clk_scaling_start_busy(hba);
        __set_bit(task_tag, &hba->outstanding_reqs);
        ufshcd_writel(hba, 1 << task_tag, REG_UTP_TRANSFER_REQ_DOOR_BELL);
        /* Make sure that doorbell is committed immediately */
        wmb();
-       ufshcd_add_command_trace(hba, task_tag, "send");
 }
 
 /**
-- 
2.25.1

Reply via email to