write in 30M

hc

2024-02-20 ea08eeccae9297f7aabd2ef7f0c2517ac4549acc

 kernel/drivers/mailbox/mailbox-test.c
..
..
@@ -12,6 +12,7 @@
12
12
 #include <linux/kernel.h>
13
13
 #include <linux/mailbox_client.h>
14
14
 #include <linux/module.h>
15
+#include <linux/mutex.h>
15
16
 #include <linux/of.h>
16
17
 #include <linux/platform_device.h>
17
18
 #include <linux/poll.h>
..
..
@@ -38,6 +39,7 @@
38
39
 	char			*signal;
39
40
 	char			*message;
40
41
 	spinlock_t		lock;
42
+	struct mutex		mutex;
41
43
 	wait_queue_head_t	waitq;
42
44
 	struct fasync_struct	*async_queue;
43
45
 	struct dentry		*root_debugfs_dir;
..
..
@@ -95,6 +97,7 @@
95
97
 				       size_t count, loff_t *ppos)
96
98
 {
97
99
 	struct mbox_test_device *tdev = filp->private_data;
100
+	char *message;
98
101
 	void *data;
99
102
 	int ret;
100
103
 
..
..
@@ -110,10 +113,13 @@
110
113
 		return -EINVAL;
111
114
 	}
112
115
 
113
-	tdev->message = kzalloc(MBOX_MAX_MSG_LEN, GFP_KERNEL);
114
-	if (!tdev->message)
116
+	message = kzalloc(MBOX_MAX_MSG_LEN, GFP_KERNEL);
117
+	if (!message)
115
118
 		return -ENOMEM;
116
119
 
120
+	mutex_lock(&tdev->mutex);
121
+
122
+	tdev->message = message;
117
123
 	ret = copy_from_user(tdev->message, userbuf, count);
118
124
 	if (ret) {
119
125
 		ret = -EFAULT;
..
..
@@ -143,6 +149,8 @@
143
149
 	kfree(tdev->signal);
144
150
 	kfree(tdev->message);
145
151
 	tdev->signal = NULL;
152
+
153
+	mutex_unlock(&tdev->mutex);
146
154
 
147
155
 	return ret < 0 ? ret : count;
148
156
 }
..
..
@@ -392,6 +400,7 @@
392
400
 	platform_set_drvdata(pdev, tdev);
393
401
 
394
402
 	spin_lock_init(&tdev->lock);
403
+	mutex_init(&tdev->mutex);
395
404
 
396
405
 	if (tdev->rx_channel) {
397
406
 		tdev->rx_buffer = devm_kzalloc(&pdev->dev,