Download raw body.
sys/ihidev: prevent crash on interrupt storm
> On 23 Dec 2024, at 13:21, Kirill A. Korinsky <kirill@korins.ky> wrote:
>
> tech@,
>
> Before I move forward with quirks, I'd like to fix the cause of a crash in a
> system on HONOR MagicBook Art 14 Snapdragon.
>
> Let's assume that we have a device on a machine I2C bus which goes into a
> so-called interrupt storm for some reason. Under this condition, the system
> crashes if an interrupt arrives before we allocate a buffer to read it.
>
> Here's an example of a trace:
>
> panic: attempt to access user address 0x0 from EL1
> Stopped at panic+0x140: cmp w21, #0x0
>
> TID PID UID PRFLAGS PFLAGS CPU COMMAND
> db_enter() at panic+0x13c
> panic() at kdata_abort+0x180
> do_el0_sync() at handle_el1h_sync+0x68
> handle_el1h_sync() at qciic_exec+0x2d4
> qciic_exec() at ihidev_intr+0x70
> ihidev_intr() at qcgpio_intr+0xac
> qcgpio_intr() at agintc_irq_handler+0x2bc
>
> Tested on the same machine, without any additional patches. System boots,
> but touchpad doesn't work.
>
> Ok?
>
Why don't establish interrupt handler after buffer allocation?
> Index: sys/dev/i2c/ihidev.c
> ===================================================================
> RCS file: /home/cvs/src/sys/dev/i2c/ihidev.c,v
> diff -u -p -r1.33 ihidev.c
> --- sys/dev/i2c/ihidev.c 18 Oct 2024 12:53:49 -0000 1.33
> +++ sys/dev/i2c/ihidev.c 23 Dec 2024 09:46:36 -0000
> @@ -646,6 +646,15 @@ ihidev_intr(void *arg)
> timeout_del_barrier(&sc->sc_timer);
> }
>
> + if (sc->sc_ibuf == NULL) {
> + /* ignore interrupt before bufer is allocated */
> + if (sc->sc_poll) {
> + sc->sc_fastpoll = 0;
> + goto more_polling;
> + }
> + return (1);
> + }
> +
> /*
> * XXX: force I2C_F_POLL for now to avoid dwiic interrupting
> * while we are interrupting
>
>
> --
> wbr, Kirill
>
sys/ihidev: prevent crash on interrupt storm