[5.9,080/152] usb: cdns3: gadget: fix some endian issues

Message ID	20201201084722.398944135@linuxfoundation.org
State	New
Headers	show Return-Path: <stable-owner@kernel.org> From: Greg Kroah-Hartman <gregkh@linuxfoundation.org> To: linux-kernel@vger.kernel.org Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>, stable@vger.kernel.org, kbuild test robot <lkp@intel.com>, Peter Chen <peter.chen@nxp.com>, Felipe Balbi <balbi@kernel.org>, Sasha Levin <sashal@kernel.org> Subject: [PATCH 5.9 080/152] usb: cdns3: gadget: fix some endian issues Date: Tue, 1 Dec 2020 09:53:15 +0100 Message-Id: <20201201084722.398944135@linuxfoundation.org> In-Reply-To: <20201201084711.707195422@linuxfoundation.org> References: <20201201084711.707195422@linuxfoundation.org> User-Agent: quilt/0.66 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Precedence: bulk
Series	None \| expand [5.9,002/152] io_uring: order refnode recycling [5.9,003/152] spi: bcm-qspi: Fix use-after-free on unbind [5.9,004/152] spi: bcm2835: Fix use-after-free on unbind [5.9,005/152] ipv4: use IS_ENABLED instead of ifdef [5.9,006/152] IB/hfi1: Ensure correct mm is used at all times [5.9,007/152] RDMA/i40iw: Address an mmap handler exploit in i40iw [5.9,008/152] btrfs: fix missing delalloc new bit for new delalloc ranges [5.9,009/152] btrfs: tree-checker: add missing return after error in root_item [5.9,010/152] btrfs: tree-checker: add missing returns after data_ref alignment checks [5.9,011/152] btrfs: dont access possibly stale fs_info data for printing duplicate device [5.9,012/152] btrfs: fix lockdep splat when reading qgroup config on mount [5.9,013/152] rtc: pcf2127: fix a bug when not specify interrupts property [5.9,014/152] s390: fix fpu restore in entry.S [5.9,015/152] mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) [5.9,016/152] smb3: Call cifs reconnect from demultiplex thread [5.9,017/152] smb3: Avoid Mid pending list corruption [5.9,018/152] smb3: Handle error case during offload read path [5.9,019/152] cifs: fix a memleak with modefromsid [5.9,020/152] powerpc/64s: Fix KVM system reset handling when CONFIG_PPC_PSERIES=y [5.9,021/152] powerpc/64s/exception: KVM Fix for host DSI being taken in HPT guest MMU context [5.9,022/152] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page [5.9,023/152] KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace [5.9,024/152] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint [5.9,025/152] KVM: x86: Fix split-irqchip vs interrupt injection window request [5.9,026/152] iommu/vt-d: Dont read VCCAP register unless it exists [5.9,027/152] firmware: xilinx: Use hash-table for api feature check [5.9,028/152] drm/amdgpu: fix SI UVD firmware validate resume fail [5.9,029/152] io_uring: fix ITER_BVEC check [5.9,030/152] trace: fix potenial dangerous pointer [5.9,031/152] arm64: tegra: Correct the UART for Jetson Xavier NX [5.9,032/152] arm64: tegra: Fix USB_VBUS_EN0 regulator on Jetson TX1 [5.9,033/152] arm64: pgtable: Fix pte_accessible() [5.9,034/152] arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() [5.9,035/152] drm/amdgpu: fix a page fault [5.9,036/152] drm/amdgpu: update golden setting for sienna_cichlid [5.9,037/152] drm/amd/amdgpu: fix null pointer in runtime pm [5.9,038/152] drm/amd/display: Avoid HDCP initialization in devices without output [5.9,039/152] HID: uclogic: Add ID for Trust Flex Design Tablet [5.9,040/152] HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses [5.9,041/152] HID: cypress: Support Varmilo Keyboards media hotkeys [5.9,042/152] HID: add support for Sega Saturn [5.9,043/152] Input: i8042 - allow insmod to succeed on devices without an i8042 controller [5.9,044/152] HID: hid-sensor-hub: Fix issue with devices with no report ID [5.9,045/152] staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK [5.9,046/152] HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices [5.9,047/152] dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant [5.9,048/152] x86/xen: dont unbind uninitialized lock_kicker_irq [5.9,049/152] kunit: fix display of failed expectations for strings [5.9,050/152] HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge [5.9,051/152] HID: Add Logitech Dinovo Edge battery quirk [5.9,052/152] proc: dont allow async path resolution of /proc/self components [5.9,053/152] nvme: free sq/cq dbbuf pointers when dbbuf set fails [5.9,054/152] io_uring: handle -EOPNOTSUPP on path resolution [5.9,055/152] net: stmmac: dwmac_lib: enlarge dma reset timeout [5.9,056/152] vdpasim: fix "mac_pton" undefined error [5.9,057/152] vhost: add helper to check if a vq has been setup [5.9,058/152] vhost scsi: alloc cmds per vq instead of session [5.9,059/152] vhost scsi: fix cmd completion race [5.9,060/152] cpuidle: tegra: Annotate tegra_pm_set_cpu_in_lp2() with RCU_NONIDLE [5.9,061/152] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size [5.9,062/152] scsi: libiscsi: Fix NOP race condition [5.9,063/152] scsi: target: iscsi: Fix cmd abort fabric stop race [5.9,064/152] lockdep: Put graph lock/unlock under lock_recursion protection [5.9,065/152] perf/x86: fix sysfs type mismatches [5.9,066/152] xtensa: uaccess: Add missing __user to strncpy_from_user() prototype [5.9,067/152] x86/dumpstack: Do not try to access user space code of other tasks [5.9,068/152] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset [5.9,069/152] bus: ti-sysc: Fix reset status check for modules with quirks [5.9,070/152] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw [5.9,071/152] ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled() [5.9,072/152] phy: tegra: xusb: Fix dangling pointer on probe failure [5.9,073/152] iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC [5.9,074/152] iwlwifi: mvm: properly cancel a session protection for P2P [5.9,075/152] iwlwifi: mvm: write queue_sync_state only for sync [5.9,076/152] KVM: s390: pv: Mark mm as protected after the set secure parameters and improve cle... [5.9,077/152] KVM: s390: remove diag318 reset code [5.9,078/152] btrfs: qgroup: dont commit transaction when we already hold the handle [5.9,079/152] batman-adv: set .owner to THIS_MODULE [5.9,080/152] usb: cdns3: gadget: fix some endian issues [5.9,081/152] usb: cdns3: gadget: calculate TD_SIZE based on TD [5.9,082/152] phy: qualcomm: usb: Fix SuperSpeed PHY OF dependency [5.9,083/152] phy: qualcomm: Fix 28 nm Hi-Speed USB PHY OF dependency [5.9,084/152] arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed [5.9,085/152] bus: ti-sysc: suppress err msg for timers used as clockevent/source [5.9,086/152] ARM: dts: dra76x: m_can: fix order of clocks [5.9,087/152] scsi: ufs: Fix race between shutdown and runtime resume flow [5.9,088/152] bnxt_en: fix error return code in bnxt_init_one() [5.9,089/152] bnxt_en: fix error return code in bnxt_init_board() [5.9,090/152] video: hyperv_fb: Fix the cache type when mapping the VRAM [5.9,091/152] bnxt_en: Release PCI regions when DMA mask setup fails during probe. [5.9,092/152] block/keyslot-manager: prevent crash when num_slots=1 [5.9,093/152] cxgb4: fix the panic caused by non smac rewrite [5.9,094/152] dpaa2-eth: select XGMAC_MDIO for MDIO bus support [5.9,095/152] s390/qeth: make af_iucv TX notification call more robust [5.9,096/152] s390/qeth: fix af_iucv notification race [5.9,097/152] s390/qeth: fix tear down of async TX buffers [5.9,098/152] drm/mediatek: dsi: Modify horizontal front/back porch byte formula [5.9,099/152] bonding: wait for sysfs kobject destruction before freeing struct slave [5.9,100/152] ibmvnic: fix call_netdevice_notifiers in do_reset [5.9,101/152] ibmvnic: notify peers when failover and migration happen [5.9,102/152] powerpc/64s: Fix allnoconfig build since uaccess flush [5.9,103/152] iommu: Check return of __iommu_attach_device() [5.9,104/152] IB/mthca: fix return value of error branch in mthca_init_cq() [5.9,105/152] i40e: Fix removing driver while bare-metal VFs pass traffic [5.9,106/152] firmware: xilinx: Fix SD DLL node reset issue [5.9,107/152] spi: imx: fix the unbalanced spi runtime pm management [5.9,108/152] io_uring: fix shift-out-of-bounds when round up cq size [5.9,109/152] aquantia: Remove the build_skb path [5.9,110/152] nfc: s3fwrn5: use signed integer for parsing GPIO numbers [5.9,111/152] net: ena: handle bad request id in ena_netdev [5.9,112/152] net: ena: set initial DMA width to avoid intel iommu issue [5.9,113/152] net: ena: fix packets addresses for rx_offset feature [5.9,114/152] ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues [5.9,115/152] ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq [5.9,116/152] ibmvnic: enhance resetting status check during module exit [5.9,117/152] optee: add writeback to valid memory type [5.9,118/152] x86/tboot: Dont disable swiotlb when iommu is forced on [5.9,119/152] arm64: tegra: Wrong AON HSP reg property size [5.9,120/152] efi/efivars: Set generic ops before loading SSDT [5.9,121/152] efivarfs: revert "fix memory leak in efivarfs_create()" [5.9,122/152] efi: EFI_EARLYCON should depend on EFI [5.9,123/152] riscv: Explicitly specify the build id style in vDSO Makefile again [5.9,124/152] RISC-V: Add missing jump label initialization [5.9,125/152] RISC-V: fix barrier() use in <vdso/processor.h> [5.9,126/152] net: stmmac: fix incorrect merge of patch upstream [5.9,127/152] enetc: Let the hardware auto-advance the taprio base-time of 0 [5.9,128/152] ptp: clockmatrix: bug fix for idtcm_strverscmp [5.9,129/152] drm/nouveau: fix relocations applying logic and a double-free [5.9,130/152] can: gs_usb: fix endianess problem with candleLight firmware [5.9,131/152] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time [5.9,132/152] platform/x86: toshiba_acpi: Fix the wrong variable assignment [5.9,133/152] RDMA/hns: Fix wrong field of SRQ number the device supports [5.9,134/152] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP [5.9,135/152] RDMA/hns: Bugfix for memory window mtpt configuration [5.9,136/152] can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from request_threaded_irq()s ... [5.9,137/152] can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 [5.9,138/152] perf record: Synthesize cgroup events only if needed [5.9,139/152] perf stat: Use proper cpu for shadow stats [5.9,140/152] perf probe: Fix to die_entrypc() returns error correctly [5.9,141/152] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe [5.9,142/152] USB: core: Change %pK for __user pointers to %px [5.9,143/152] usb: gadget: f_midi: Fix memleak in f_midi_alloc [5.9,144/152] USB: core: Fix regression in Hercules audio card [5.9,145/152] USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in u... [5.9,146/152] usb: gadget: Fix memleak in gadgetfs_fill_super [5.9,147/152] irqchip/exiu: Fix the index of fwspec for IRQ type [5.9,148/152] x86/mce: Do not overwrite no_way_out if mce_end() fails [5.9,149/152] x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb [5.9,150/152] x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak [5.9,151/152] x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak [5.9,152/152] drm/amdgpu: add rlc iram and dram firmware support

Message ID

20201201084722.398944135@linuxfoundation.org

State

New

Headers

From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, kbuild test robot <lkp@intel.com>,
	Peter Chen <peter.chen@nxp.com>, Felipe Balbi <balbi@kernel.org>,
	Sasha Levin <sashal@kernel.org>
Subject: [PATCH 5.9 080/152] usb: cdns3: gadget: fix some endian issues
Date: Tue,  1 Dec 2020 09:53:15 +0100
Message-Id: <20201201084722.398944135@linuxfoundation.org>
In-Reply-To: <20201201084711.707195422@linuxfoundation.org>
References: <20201201084711.707195422@linuxfoundation.org>
User-Agent: quilt/0.66
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Precedence: bulk

Series

None | expand

Commit Message

Greg Kroah-Hartman Dec. 1, 2020, 8:53 a.m. UTC

From: Peter Chen <peter.chen@nxp.com>

[ Upstream commit 8dafb3c04df3b3b5a3ee2c7f5d8285a8b2f0aa78 ]

It is found by sparse.

Reported-by: kbuild test robot <lkp@intel.com>
Signed-off-by: Peter Chen <peter.chen@nxp.com>
Signed-off-by: Felipe Balbi <balbi@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
 drivers/usb/cdns3/gadget.c | 60 +++++++++++++++++++-------------------
 1 file changed, 30 insertions(+), 30 deletions(-)

diff --git a/drivers/usb/cdns3/gadget.c b/drivers/usb/cdns3/gadget.c
index e0e1cb907ffd8..dc5e6be3fd45a 100644
--- a/drivers/usb/cdns3/gadget.c
+++ b/drivers/usb/cdns3/gadget.c
@@ -261,8 +261,8 @@  int cdns3_allocate_trb_pool(struct cdns3_endpoint *priv_ep)
 		 */
 		link_trb->control = 0;
 	} else {
-		link_trb->buffer = TRB_BUFFER(priv_ep->trb_pool_dma);
-		link_trb->control = TRB_CYCLE | TRB_TYPE(TRB_LINK) | TRB_TOGGLE;
+		link_trb->buffer = cpu_to_le32(TRB_BUFFER(priv_ep->trb_pool_dma));
+		link_trb->control = cpu_to_le32(TRB_CYCLE | TRB_TYPE(TRB_LINK) | TRB_TOGGLE);
 	}
 	return 0;
 }
@@ -853,10 +853,10 @@  static void cdns3_wa1_restore_cycle_bit(struct cdns3_endpoint *priv_ep)
 		priv_ep->wa1_trb_index = 0xFFFF;
 		if (priv_ep->wa1_cycle_bit) {
 			priv_ep->wa1_trb->control =
-				priv_ep->wa1_trb->control | 0x1;
+				priv_ep->wa1_trb->control | cpu_to_le32(0x1);
 		} else {
 			priv_ep->wa1_trb->control =
-				priv_ep->wa1_trb->control & ~0x1;
+				priv_ep->wa1_trb->control & cpu_to_le32(~0x1);
 		}
 	}
 }
@@ -1014,17 +1014,16 @@  static int cdns3_ep_run_stream_transfer(struct cdns3_endpoint *priv_ep,
 		  TRB_STREAM_ID(priv_req->request.stream_id) | TRB_ISP;
 
 	if (!request->num_sgs) {
-		trb->buffer = TRB_BUFFER(trb_dma);
+		trb->buffer = cpu_to_le32(TRB_BUFFER(trb_dma));
 		length = request->length;
 	} else {
-		trb->buffer = TRB_BUFFER(request->sg[sg_idx].dma_address);
+		trb->buffer = cpu_to_le32(TRB_BUFFER(request->sg[sg_idx].dma_address));
 		length = request->sg[sg_idx].length;
 	}
 
 	tdl = DIV_ROUND_UP(length, priv_ep->endpoint.maxpacket);
 
-	trb->length = TRB_BURST_LEN(16 /*priv_ep->trb_burst_size*/) |
-				  TRB_LEN(length);
+	trb->length = cpu_to_le32(TRB_BURST_LEN(16) | TRB_LEN(length));
 
 	/*
 	 * For DEV_VER_V2 controller version we have enabled
@@ -1033,11 +1032,11 @@  static int cdns3_ep_run_stream_transfer(struct cdns3_endpoint *priv_ep,
 	 */
 	if (priv_dev->dev_ver >= DEV_VER_V2) {
 		if (priv_dev->gadget.speed == USB_SPEED_SUPER)
-			trb->length |= TRB_TDL_SS_SIZE(tdl);
+			trb->length |= cpu_to_le32(TRB_TDL_SS_SIZE(tdl));
 	}
 	priv_req->flags |= REQUEST_PENDING;
 
-	trb->control = control;
+	trb->control = cpu_to_le32(control);
 
 	trace_cdns3_prepare_trb(priv_ep, priv_req->trb);
 
@@ -1162,8 +1161,8 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 		    TRBS_PER_SEGMENT > 2)
 			ch_bit = TRB_CHAIN;
 
-		link_trb->control = ((priv_ep->pcs) ? TRB_CYCLE : 0) |
-				    TRB_TYPE(TRB_LINK) | TRB_TOGGLE | ch_bit;
+		link_trb->control = cpu_to_le32(((priv_ep->pcs) ? TRB_CYCLE : 0) |
+				    TRB_TYPE(TRB_LINK) | TRB_TOGGLE | ch_bit);
 	}
 
 	if (priv_dev->dev_ver <= DEV_VER_V2)
@@ -1178,8 +1177,8 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 
 		/* fill TRB */
 		control |= TRB_TYPE(TRB_NORMAL);
-		trb->buffer = TRB_BUFFER(request->num_sgs == 0
-				? trb_dma : request->sg[sg_iter].dma_address);
+		trb->buffer = cpu_to_le32(TRB_BUFFER(request->num_sgs == 0
+				? trb_dma : request->sg[sg_iter].dma_address));
 
 		if (likely(!request->num_sgs))
 			length = request->length;
@@ -1193,10 +1192,10 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 			total_tdl += DIV_ROUND_UP(length,
 					       priv_ep->endpoint.maxpacket);
 
-		trb->length = TRB_BURST_LEN(priv_ep->trb_burst_size) |
-					TRB_LEN(length);
+		trb->length = cpu_to_le32(TRB_BURST_LEN(priv_ep->trb_burst_size) |
+					TRB_LEN(length));
 		if (priv_dev->gadget.speed == USB_SPEED_SUPER)
-			trb->length |= TRB_TDL_SS_SIZE(td_size);
+			trb->length |= cpu_to_le32(TRB_TDL_SS_SIZE(td_size));
 		else
 			control |= TRB_TDL_HS_SIZE(td_size);
 
@@ -1218,9 +1217,9 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 		}
 
 		if (sg_iter)
-			trb->control = control;
+			trb->control = cpu_to_le32(control);
 		else
-			priv_req->trb->control = control;
+			priv_req->trb->control = cpu_to_le32(control);
 
 		control = 0;
 		++sg_iter;
@@ -1234,7 +1233,7 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 	priv_req->flags |= REQUEST_PENDING;
 
 	if (sg_iter == 1)
-		trb->control |= TRB_IOC | TRB_ISP;
+		trb->control |= cpu_to_le32(TRB_IOC | TRB_ISP);
 
 	if (priv_dev->dev_ver < DEV_VER_V2 &&
 	    (priv_ep->flags & EP_TDLCHK_EN)) {
@@ -1260,7 +1259,7 @@  static int cdns3_ep_run_transfer(struct cdns3_endpoint *priv_ep,
 
 	/* give the TD to the consumer*/
 	if (togle_pcs)
-		trb->control =  trb->control ^ 1;
+		trb->control = trb->control ^ cpu_to_le32(1);
 
 	if (priv_dev->dev_ver <= DEV_VER_V2)
 		cdns3_wa1_tray_restore_cycle_bit(priv_dev, priv_ep);
@@ -1399,7 +1398,7 @@  static bool cdns3_request_handled(struct cdns3_endpoint *priv_ep,
 
 	trb = &priv_ep->trb_pool[priv_req->start_trb];
 
-	if ((trb->control  & TRB_CYCLE) != priv_ep->ccs)
+	if ((le32_to_cpu(trb->control) & TRB_CYCLE) != priv_ep->ccs)
 		goto finish;
 
 	if (doorbell == 1 && current_index == priv_ep->dequeue)
@@ -1448,7 +1447,7 @@  static void cdns3_transfer_completed(struct cdns3_device *priv_dev,
 		trb = priv_ep->trb_pool + priv_ep->dequeue;
 
 		/* Request was dequeued and TRB was changed to TRB_LINK. */
-		if (TRB_FIELD_TO_TYPE(trb->control) == TRB_LINK) {
+		if (TRB_FIELD_TO_TYPE(le32_to_cpu(trb->control)) == TRB_LINK) {
 			trace_cdns3_complete_trb(priv_ep, trb);
 			cdns3_move_deq_to_next_trb(priv_req);
 		}
@@ -1580,7 +1579,7 @@  static int cdns3_check_ep_interrupt_proceed(struct cdns3_endpoint *priv_ep)
 		 * that host ignore the ERDY packet and driver has to send it
 		 * again.
 		 */
-		if (tdl && (dbusy | !EP_STS_BUFFEMPTY(ep_sts_reg) |
+		if (tdl && (dbusy || !EP_STS_BUFFEMPTY(ep_sts_reg) ||
 		    EP_STS_HOSTPP(ep_sts_reg))) {
 			writel(EP_CMD_ERDY |
 			       EP_CMD_ERDY_SID(priv_ep->last_stream_id),
@@ -2564,10 +2563,10 @@  found:
 
 	/* Update ring only if removed request is on pending_req_list list */
 	if (req_on_hw_ring && link_trb) {
-		link_trb->buffer = TRB_BUFFER(priv_ep->trb_pool_dma +
-			((priv_req->end_trb + 1) * TRB_SIZE));
-		link_trb->control = (link_trb->control & TRB_CYCLE) |
-				    TRB_TYPE(TRB_LINK) | TRB_CHAIN;
+		link_trb->buffer = cpu_to_le32(TRB_BUFFER(priv_ep->trb_pool_dma +
+			((priv_req->end_trb + 1) * TRB_SIZE)));
+		link_trb->control = cpu_to_le32((le32_to_cpu(link_trb->control) & TRB_CYCLE) |
+				    TRB_TYPE(TRB_LINK) | TRB_CHAIN);
 
 		if (priv_ep->wa1_trb == priv_req->trb)
 			cdns3_wa1_restore_cycle_bit(priv_ep);
@@ -2622,7 +2621,7 @@  int __cdns3_gadget_ep_clear_halt(struct cdns3_endpoint *priv_ep)
 		priv_req = to_cdns3_request(request);
 		trb = priv_req->trb;
 		if (trb)
-			trb->control = trb->control ^ TRB_CYCLE;
+			trb->control = trb->control ^ cpu_to_le32(TRB_CYCLE);
 	}
 
 	writel(EP_CMD_CSTALL | EP_CMD_EPRST, &priv_dev->regs->ep_cmd);
@@ -2637,7 +2636,8 @@  int __cdns3_gadget_ep_clear_halt(struct cdns3_endpoint *priv_ep)
 
 	if (request) {
 		if (trb)
-			trb->control = trb->control ^ TRB_CYCLE;
+			trb->control = trb->control ^ cpu_to_le32(TRB_CYCLE);
+
 		cdns3_rearm_transfer(priv_ep, 1);
 	}

[5.9,080/152] usb: cdns3: gadget: fix some endian issues

Commit Message

Patch