From: Adrian Hunter <adrian.hunter@intel.com>
To: alexandre.belloni@bootlin.com
Cc: Frank.Li@nxp.com, linux-i3c@lists.infradead.org
Subject: [PATCH 07/12] i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
Date: Fri, 27 Feb 2026 16:11:44 +0200 [thread overview]
Message-ID: <20260227141149.184980-8-adrian.hunter@intel.com> (raw)
In-Reply-To: <20260227141149.184980-1-adrian.hunter@intel.com>
The internal control command descriptor used for no-op commands includes a
Transaction ID (TID) field, but the no-op command constructed in
hci_dma_dequeue_xfer() omitted it. As a result, the hardware receives a
no-op descriptor without the expected TID.
This bug has gone unnoticed because the TID is currently not validated in
the no-op completion path, but the descriptor format requires it to be
present.
Add the missing TID field when generating a no-op descriptor so that its
layout matches the defined command structure.
Fixes: 9ad9a52cce282 ("i3c/master: introduce the mipi-i3c-hci driver")
Cc: stable@vger.kernel.org
Signed-off-by: Adrian Hunter <adrian.hunter@intel.com>
---
drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 +
drivers/i3c/master/mipi-i3c-hci/dma.c | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/i3c/master/mipi-i3c-hci/cmd.h b/drivers/i3c/master/mipi-i3c-hci/cmd.h
index 1d6dd2c5d01a..b1bf87daa651 100644
--- a/drivers/i3c/master/mipi-i3c-hci/cmd.h
+++ b/drivers/i3c/master/mipi-i3c-hci/cmd.h
@@ -17,6 +17,7 @@
#define CMD_0_TOC W0_BIT_(31)
#define CMD_0_ROC W0_BIT_(30)
#define CMD_0_ATTR W0_MASK(2, 0)
+#define CMD_0_TID W0_MASK(6, 3)
/*
* Response Descriptor Structure
diff --git a/drivers/i3c/master/mipi-i3c-hci/dma.c b/drivers/i3c/master/mipi-i3c-hci/dma.c
index dff96b84479e..a11d0743fb80 100644
--- a/drivers/i3c/master/mipi-i3c-hci/dma.c
+++ b/drivers/i3c/master/mipi-i3c-hci/dma.c
@@ -586,7 +586,7 @@ static bool hci_dma_dequeue_xfer(struct i3c_hci *hci,
u32 *ring_data = rh->xfer + rh->xfer_struct_sz * idx;
/* store no-op cmd descriptor */
- *ring_data++ = FIELD_PREP(CMD_0_ATTR, 0x7);
+ *ring_data++ = FIELD_PREP(CMD_0_ATTR, 0x7) | FIELD_PREP(CMD_0_TID, xfer->cmd_tid);
*ring_data++ = 0;
if (hci->cmd == &mipi_i3c_hci_cmd_v2) {
*ring_data++ = 0;
--
2.51.0
--
linux-i3c mailing list
linux-i3c@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-i3c
next prev parent reply other threads:[~2026-02-27 14:12 UTC|newest]
Thread overview: 36+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-27 14:11 [PATCH 00/12] i3c: mipi-i3c-hci: Fixes for v7.0 Adrian Hunter
2026-02-27 14:11 ` [PATCH 01/12] i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Adrian Hunter
2026-02-27 16:00 ` Frank Li
2026-02-27 14:11 ` [PATCH 02/12] i3c: mipi-i3c-hci: Fix Hot-Join NACK Adrian Hunter
2026-02-27 16:03 ` Frank Li
2026-03-02 8:42 ` Adrian Hunter
2026-03-02 17:52 ` Frank Li
2026-02-27 14:11 ` [PATCH 03/12] i3c: mipi-i3c-hci: Fix race in DMA ring enqueue for parallel xfers Adrian Hunter
2026-02-27 16:09 ` Frank Li
2026-02-27 14:11 ` [PATCH 04/12] i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Adrian Hunter
2026-02-27 16:18 ` Frank Li
2026-03-02 8:43 ` Adrian Hunter
2026-03-02 19:23 ` Frank Li
2026-03-04 17:58 ` Adrian Hunter
2026-02-27 14:11 ` [PATCH 05/12] i3c: mipi-i3c-hci: Fix race between DMA ring dequeue and the interrupt handler Adrian Hunter
2026-02-27 16:21 ` Frank Li
2026-02-27 14:11 ` [PATCH 06/12] i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Adrian Hunter
2026-02-27 16:25 ` Frank Li
2026-03-02 8:45 ` Adrian Hunter
2026-03-02 17:49 ` Frank Li
2026-02-27 14:11 ` Adrian Hunter [this message]
2026-02-27 16:27 ` [PATCH 07/12] i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Frank Li
2026-02-27 14:11 ` [PATCH 08/12] i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter
2026-02-27 16:28 ` Frank Li
2026-02-27 14:11 ` [PATCH 09/12] i3c: mipi-i3c-hci: Consolidate common xfer processing logic Adrian Hunter
2026-02-27 16:30 ` Frank Li
2026-02-27 14:11 ` [PATCH 10/12] i3c: mipi-i3c-hci: Fix race in DMA error handling in interrupt context Adrian Hunter
2026-02-27 16:40 ` Frank Li
2026-03-02 8:45 ` Adrian Hunter
2026-02-27 14:11 ` [PATCH 11/12] i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization Adrian Hunter
2026-02-27 16:42 ` Frank Li
2026-03-02 8:43 ` Adrian Hunter
2026-03-02 19:18 ` Frank Li
2026-03-04 18:13 ` Adrian Hunter
2026-02-27 14:11 ` [PATCH 12/12] i3c: mipi-i3c-hci: Fallback to software reset when bus disable fails Adrian Hunter
2026-02-27 16:44 ` Frank Li
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260227141149.184980-8-adrian.hunter@intel.com \
--to=adrian.hunter@intel.com \
--cc=Frank.Li@nxp.com \
--cc=alexandre.belloni@bootlin.com \
--cc=linux-i3c@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox