Re: [v3,2/3] nfc: nfcmrvl: convert to gpio descriptors
From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-03-06 23:33:41
Also in:
linux-gpio, lkml
This is an AI-generated review of your patch. The human sending this email has considered the AI review valid, or at least plausible. For local reproduction steps see https://netdev-ai.bots.linux.dev/ai-local.html --- nfc: nfcmrvl: convert to gpio descriptors This commit replaces the legacy GPIO API (of_get_named_gpio() / gpio_request_one() / gpio_set_value()) with the descriptor-based API (devm_gpiod_get_optional() / gpiod_set_value()) from <linux/gpio/consumer.h>, removing the dependency on <linux/of_gpio.h>.
quoted hunk ↗ jump to hunk
diff --git a/drivers/nfc/nfcmrvl/main.c b/drivers/nfc/nfcmrvl/main.c index c51d22e4579c..46cc1386ad3b 100644 --- a/drivers/nfc/nfcmrvl/main.c +++ b/drivers/nfc/nfcmrvl/main.c
[ ... ]
quoted hunk ↗ jump to hunk
@@ -112,13 +112,12 @@ struct nfcmrvl_private *nfcmrvl_nci_register_dev(enum nfcmrvl_phy phy, memcpy(&priv->config, pdata, sizeof(*pdata)); - if (gpio_is_valid(priv->config.reset_n_io)) { - rc = gpio_request_one(priv->config.reset_n_io, - GPIOF_OUT_INIT_LOW, - "nfcmrvl_reset_n"); - if (rc < 0) { - priv->config.reset_n_io = -EINVAL; - nfc_err(dev, "failed to request reset_n io\n"); + if (!priv->config.reset_gpio) { + priv->config.reset_gpio = + devm_gpiod_get_optional(dev, "reset", GPIOD_OUT_LOW); + if (IS_ERR(priv->config.reset_gpio)) { + priv->config.reset_gpio = NULL; + nfc_err(dev, "failed to get reset gpio\n"); } }
Does the I2C and SPI paths properly initialize reset_gpio? Looking at the
I2C path (nfcmrvl_i2c_probe -> nfcmrvl_i2c_parse_dt), the function declares
'struct nfcmrvl_platform_data config' on the stack without zeroing and calls
nfcmrvl_parse_dt() which now only sets hci_muxed:
drivers/nfc/nfcmrvl/main.c:nfcmrvl_parse_dt() {
pdata->hci_muxed = of_property_read_bool(node, "hci-muxed");
return 0;
}
The reset_gpio field is left uninitialized with stack garbage. The same
issue affects SPI (nfcmrvl_spi_probe -> nfcmrvl_spi_parse_dt).
When the uninitialized config is passed to nfcmrvl_nci_register_dev(), the
check 'if (!priv->config.reset_gpio)' may evaluate to false (garbage
non-NULL pointer), causing the code to skip devm_gpiod_get_optional() and
later use the garbage pointer in gpiod_set_value():
nfcmrvl_chip_halt() {
if (priv->config.reset_gpio)
gpiod_set_value(priv->config.reset_gpio, 0);
}
Can this cause a kernel crash? The UART path was updated in this patch to
initialize the field properly, and the USB path already uses memset to zero
the config, so only I2C and SPI are affected.
[ ... ]
quoted hunk ↗ jump to hunk
@@ -233,34 +227,24 @@ void nfcmrvl_chip_reset(struct nfcmrvl_private *priv) /* Reset possible fault of previous session */ clear_bit(NFCMRVL_PHY_ERROR, &priv->flags); - if (gpio_is_valid(priv->config.reset_n_io)) { + if (priv->config.reset_gpio) { nfc_info(priv->dev, "reset the chip\n"); - gpio_set_value(priv->config.reset_n_io, 0); + gpiod_set_value(priv->config.reset_gpio, 0); usleep_range(5000, 10000); - gpio_set_value(priv->config.reset_n_io, 1); + gpiod_set_value(priv->config.reset_gpio, 1); } else nfc_info(priv->dev, "no reset available on this interface\n"); } void nfcmrvl_chip_halt(struct nfcmrvl_private *priv) { - if (gpio_is_valid(priv->config.reset_n_io)) - gpio_set_value(priv->config.reset_n_io, 0); + if (priv->config.reset_gpio) + gpiod_set_value(priv->config.reset_gpio, 0); }
Are the GPIO polarity values inverted here? The DT binding documentation (Documentation/devicetree/bindings/net/nfc/marvell,nci.yaml) specifies GPIO_ACTIVE_LOW for the reset-n-io property: reset-n-io = <&gpio3 19 GPIO_ACTIVE_LOW>; With the gpiod API, gpiod_set_value() respects the active-low flag: - gpiod_set_value(desc, 1) = assert (physically LOW for active-low) - gpiod_set_value(desc, 0) = deassert (physically HIGH for active-low) The old gpio_set_value() ignored polarity flags and drove raw physical levels directly. The patch keeps the same raw values (0 then 1) but with gpiod_set_value() this inverts the actual behavior: nfcmrvl_chip_reset() now does: - gpiod_set_value(gpio, 0) = deassert reset (chip running) - usleep_range(5000, 10000) - gpiod_set_value(gpio, 1) = assert reset (chip in reset) This is backwards - it leaves the chip stuck in reset after a "reset" operation. Similarly, nfcmrvl_chip_halt() calls gpiod_set_value(gpio, 0) which deasserts reset (chip runs) instead of asserting it (chip halted). Also, the GPIOD_OUT_LOW initial state in devm_gpiod_get_optional() means "deasserted" (physically HIGH) rather than the old GPIOF_OUT_INIT_LOW (physically LOW). Should the values be inverted to work correctly with the descriptor API? - chip_reset: gpiod_set_value(gpio, 1) then gpiod_set_value(gpio, 0) - chip_halt: gpiod_set_value(gpio, 1) - initial state: GPIOD_OUT_HIGH -- pw-bot: cr