sergiotarxz/nuttx
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

s32k1xx: avoid buffer overflow when CAN time is used for non-FD CAN.

Browse Source 
s32k1xx: fix initialization of MAXMB field in MCR.
This commit is contained in:
Carlos Sanchez 2023-01-09 07:32:17 +01:00 committed by Petro Karashchenko
parent 67ccee2c4f
commit 3c6d45fa99
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
arch/arm/src/s32k1xx/s32k1xx_flexcan.c
View File

@ -341,8 +341,8 @@ static struct s32k1xx_driver_s g_flexcan2;
static uint8_t g_tx_pool[(sizeof(struct canfd_frame)+MSG_DATA)*POOL_SIZE];
static uint8_t g_rx_pool[(sizeof(struct canfd_frame)+MSG_DATA)*POOL_SIZE];
#else
static uint8_t g_tx_pool[sizeof(struct can_frame)*POOL_SIZE];
static uint8_t g_rx_pool[sizeof(struct can_frame)*POOL_SIZE];
static uint8_t g_tx_pool[(sizeof(struct can_frame)+MSG_DATA)*POOL_SIZE];
static uint8_t g_rx_pool[(sizeof(struct can_frame)+MSG_DATA)*POOL_SIZE];
#endif
/****************************************************************************
@ -1629,12 +1629,17 @@ static int s32k1xx_initialize(struct s32k1xx_driver_s *priv)
putreg32(regval, priv->base + S32K1XX_CAN_CTRL2_OFFSET);
#endif
/* Counting from TXMBCOUNT into priv->rx[] makes no sense, and MBs were
* zeroed by s32k1xx_reset() above anyways.
*/
#if 0
for (i = TXMBCOUNT; i < TOTALMBCOUNT; i++)
{
priv->rx[i].id.w = 0x0;
/* FIXME sometimes we get a hard fault here */
}
#endif
putreg32(0x0, priv->base + S32K1XX_CAN_RXFGMASK_OFFSET);
@ -1718,6 +1723,9 @@ static void s32k1xx_reset(struct s32k1xx_driver_s *priv)
}
regval = getreg32(priv->base + S32K1XX_CAN_MCR_OFFSET);
regval &= ~CAN_MCR_MAXMB_MASK; /* Zero MAXMB to ensure "bitwise or"
* below sets the correct value.
*/
regval |= CAN_MCR_SLFWAK | CAN_MCR_WRNEN | CAN_MCR_SRXDIS |
CAN_MCR_IRMQ | CAN_MCR_AEN |
(((TOTALMBCOUNT - 1) << CAN_MCR_MAXMB_SHIFT) &