diff options
author | Arthur Kiyanovski <akiyano@amazon.com> | 2018-10-09 04:21:29 -0400 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2018-10-09 13:49:49 -0400 |
commit | 78a55d05def95144ca5fa9a64c49b2a0636a9866 (patch) | |
tree | 7bb860bc8cb7773d60144904df956a0ee59ebf4e | |
parent | d7703ddbd7c9cb1ab7c08e1b85b314ff8cea38e9 (diff) |
net: ena: fix NULL dereference due to untimely napi initialization
napi poll functions should be initialized before running request_irq(),
to handle a rare condition where there is a pending interrupt, causing
the ISR to fire immediately while the poll function wasn't set yet,
causing a NULL dereference.
Fixes: 1738cd3ed342 ("net: ena: Add a driver for Amazon Elastic Network Adapters (ENA)")
Signed-off-by: Arthur Kiyanovski <akiyano@amazon.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r-- | drivers/net/ethernet/amazon/ena/ena_netdev.c | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/drivers/net/ethernet/amazon/ena/ena_netdev.c b/drivers/net/ethernet/amazon/ena/ena_netdev.c index ce18e07ff5ad..d906293ce07d 100644 --- a/drivers/net/ethernet/amazon/ena/ena_netdev.c +++ b/drivers/net/ethernet/amazon/ena/ena_netdev.c | |||
@@ -1575,8 +1575,6 @@ static int ena_up_complete(struct ena_adapter *adapter) | |||
1575 | if (rc) | 1575 | if (rc) |
1576 | return rc; | 1576 | return rc; |
1577 | 1577 | ||
1578 | ena_init_napi(adapter); | ||
1579 | |||
1580 | ena_change_mtu(adapter->netdev, adapter->netdev->mtu); | 1578 | ena_change_mtu(adapter->netdev, adapter->netdev->mtu); |
1581 | 1579 | ||
1582 | ena_refill_all_rx_bufs(adapter); | 1580 | ena_refill_all_rx_bufs(adapter); |
@@ -1730,6 +1728,13 @@ static int ena_up(struct ena_adapter *adapter) | |||
1730 | 1728 | ||
1731 | ena_setup_io_intr(adapter); | 1729 | ena_setup_io_intr(adapter); |
1732 | 1730 | ||
1731 | /* napi poll functions should be initialized before running | ||
1732 | * request_irq(), to handle a rare condition where there is a pending | ||
1733 | * interrupt, causing the ISR to fire immediately while the poll | ||
1734 | * function wasn't set yet, causing a null dereference | ||
1735 | */ | ||
1736 | ena_init_napi(adapter); | ||
1737 | |||
1733 | rc = ena_request_io_irq(adapter); | 1738 | rc = ena_request_io_irq(adapter); |
1734 | if (rc) | 1739 | if (rc) |
1735 | goto err_req_irq; | 1740 | goto err_req_irq; |