[PATCH v2 0/5] wifi: ath11k: fix dest ring-buffer corruption

Johan Hovold posted 5 patches 6 months, 2 weeks ago
drivers/net/wireless/ath/ath11k/ce.c    |  3 ---
drivers/net/wireless/ath/ath11k/dp_rx.c | 25 +++++++-----------
drivers/net/wireless/ath/ath11k/hal.c   | 35 +++++++++++++++++++++----
3 files changed, 39 insertions(+), 24 deletions(-)
[PATCH v2 0/5] wifi: ath11k: fix dest ring-buffer corruption
Posted by Johan Hovold 6 months, 2 weeks ago
As a follow up to commits:

	6d037a372f81 ("wifi: ath11k: fix ring-buffer corruption")
	ab52e3e44fe9 ("wifi: ath11k: fix rx completion meta data corruption")

add the remaining missing memory barriers to make sure that destination
ring descriptors are read after the head pointers to avoid using stale
data on weakly ordered architectures like aarch64.

Also switch back to plain accesses for the descriptor fields which is
sufficient after the memory barrier.

New in v2 are two patches that adds the missing barriers also for source
rings and when updating the tail pointer for destination rings.

To avoid leaking ring details from the "hal" (lmac or non-lmac), the
barriers are added to the ath11k_hal_srng_access_end() helper. For
symmetry I therefore moved also the dest ring barriers into
ath11k_hal_srng_access_begin() and made the barrier conditional.

[ Due to this change I did not add Miaoqing's reviewed-by tag. ]

Johan


Changes in v2:
 - add tested-on tags to plain access patches
 - move destination barriers into begin helper
 - fix source ring corruption (new patch)
 - fix dest ring corruption when ring is full (new patch)


Johan Hovold (5):
  wifi: ath11k: fix dest ring-buffer corruption
  wifi: ath11k: use plain access for descriptor length
  wifi: ath11k: use plain accesses for monitor descriptor
  wifi: ath11k: fix source ring-buffer corruption
  wifi: ath11k: fix dest ring-buffer corruption when ring is full

 drivers/net/wireless/ath/ath11k/ce.c    |  3 ---
 drivers/net/wireless/ath/ath11k/dp_rx.c | 25 +++++++-----------
 drivers/net/wireless/ath/ath11k/hal.c   | 35 +++++++++++++++++++++----
 3 files changed, 39 insertions(+), 24 deletions(-)

-- 
2.49.0
Re: [PATCH v2 0/5] wifi: ath11k: fix dest ring-buffer corruption
Posted by Jeff Johnson 5 months, 3 weeks ago
On Wed, 04 Jun 2025 16:34:52 +0200, Johan Hovold wrote:
> As a follow up to commits:
> 
> 	6d037a372f81 ("wifi: ath11k: fix ring-buffer corruption")
> 	ab52e3e44fe9 ("wifi: ath11k: fix rx completion meta data corruption")
> 
> add the remaining missing memory barriers to make sure that destination
> ring descriptors are read after the head pointers to avoid using stale
> data on weakly ordered architectures like aarch64.
> 
> [...]

Applied, thanks!

[1/5] wifi: ath11k: fix dest ring-buffer corruption
      commit: 8c1ba5091fa9a2d1478da63173b16a701bdf86bb
[2/5] wifi: ath11k: use plain access for descriptor length
      commit: 3a690e9091ec07f70cedd9a7dcc074c8554f1bed
[3/5] wifi: ath11k: use plain accesses for monitor descriptor
      commit: 4aba95fb1faed7fe7f6e1edfb60c333e0275dfc1
[4/5] wifi: ath11k: fix source ring-buffer corruption
      commit: 6efa0df54022c6c9fd4d294b87622c7fcdc418c8
[5/5] wifi: ath11k: fix dest ring-buffer corruption when ring is full
      commit: aa6956150f820e6a6deba44be325ddfcb5b10f88

Best regards,
-- 
Jeff Johnson <jeff.johnson@oss.qualcomm.com>