imx6ull spi-imx.c 驱动接收导致内存问题

spi-imx.c驱动接收导致重启：

原来是如果上一次SPI发送还有要接收的数据，接下一次spi发送中如果上次的接收缓存用的是临时变量，这次保存数据时原来的空间已经被释放，而spi_imx->rx_buf只有在本次接收中spi_imx_pio_transfer，被重置

while (spi_imx->devtype_data->rx_available(spi_imx))

spi_imx->rx(spi_imx);

所以有两种修改方式：

1、用局的buff接收；

2、spi_imx_transfer中spi_imx->rx改为：eadl(spi_imx->base + MXC_CSPIRXDATA)

[ 1722.007813] yytek,board spi2.2: I/O Error in PIO

[ 1722.014474] yytek,board spi2.2: SPI transfer failed: -110

[ 1722.056835] spi_master spi2: failed to transfer one message from queue

[ 1739.448762] yytek,board spi2.2: I/O Error in PIO

[ 1739.460088] yytek,board spi2.2: SPI transfer failed: -110

[ 1739.485536] spi_master spi2: failed to transfer one message from queue

[ 1744.006441] yytek,board spi2.2: I/O Error in PIO

[ 1744.015674] yytek,board spi2.2: SPI transfer failed: -110

[ 1744.048348] spi_master spi2: failed to transfer one message from queue

[ 2142.018245] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: syscpld_run+0x94/0x94 [sysdrv]

``` code

static int spi_imx_transfer(struct spi_device *spi,

struct spi_transfer *transfer)

{

struct spi_imx_data *spi_imx = spi_master_get_devdata(spi->master);

/* flush rxfifo before transfer */

while (spi_imx->devtype_data->rx_available(spi_imx))

spi_imx->rx(spi_imx);

if (spi_imx->slave_mode)

return spi_imx_pio_transfer_slave(spi, transfer);

if (spi_imx->usedma)

return spi_imx_dma_transfer(spi_imx, transfer);

else

return spi_imx_pio_transfer(spi, transfer);

}

#define MXC_SPI_BUF_RX(type) \

static void spi_imx_buf_rx_##type(struct spi_imx_data *spi_imx) \

{ \

unsigned int val = readl(spi_imx->base + MXC_CSPIRXDATA); \

\

if (spi_imx->rx_buf) { \

*(type *)spi_imx->rx_buf = val; \

spi_imx->rx_buf += sizeof(type); \

} \

\

spi_imx->remainder -= sizeof(type); \

}

static int spi_imx_pio_transfer(struct spi_device *spi,

struct spi_transfer *transfer)

{

struct spi_imx_data *spi_imx = spi_master_get_devdata(spi->master);

unsigned long transfer_timeout;

unsigned long timeout;

spi_imx->tx_buf = transfer->tx_buf;

spi_imx->rx_buf = transfer->rx_buf;

spi_imx->count = transfer->len;

spi_imx->txfifo = 0;

spi_imx->remainder = 0;

```