diff options
author | Florian Fainelli <f.fainelli@gmail.com> | 2016-12-23 22:56:56 -0500 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2016-12-26 11:26:16 -0500 |
commit | e6afb1ad88feddf2347ea779cfaf4d03d3cd40b6 (patch) | |
tree | 798d9bc9325e7c42befe995e6ab55ebf8cc4759a | |
parent | 628185cfddf1dfb701c4efe2cfd72cf5b09f5702 (diff) |
net: korina: Fix NAPI versus resources freeing
Commit beb0babfb77e ("korina: disable napi on close and restart")
introduced calls to napi_disable() that were missing before,
unfortunately this leaves a small window during which NAPI has a chance
to run, yet we just freed resources since korina_free_ring() has been
called:
Fix this by disabling NAPI first then freeing resource, and make sure
that we also cancel the restart task before doing the resource freeing.
Fixes: beb0babfb77e ("korina: disable napi on close and restart")
Reported-by: Alexandros C. Couloumbis <alex@ozo.com>
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r-- | drivers/net/ethernet/korina.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/drivers/net/ethernet/korina.c b/drivers/net/ethernet/korina.c index cbeea915f026..8037426ec50f 100644 --- a/drivers/net/ethernet/korina.c +++ b/drivers/net/ethernet/korina.c | |||
@@ -900,10 +900,10 @@ static void korina_restart_task(struct work_struct *work) | |||
900 | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR, | 900 | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR, |
901 | &lp->rx_dma_regs->dmasm); | 901 | &lp->rx_dma_regs->dmasm); |
902 | 902 | ||
903 | korina_free_ring(dev); | ||
904 | |||
905 | napi_disable(&lp->napi); | 903 | napi_disable(&lp->napi); |
906 | 904 | ||
905 | korina_free_ring(dev); | ||
906 | |||
907 | if (korina_init(dev) < 0) { | 907 | if (korina_init(dev) < 0) { |
908 | printk(KERN_ERR "%s: cannot restart device\n", dev->name); | 908 | printk(KERN_ERR "%s: cannot restart device\n", dev->name); |
909 | return; | 909 | return; |
@@ -1064,12 +1064,12 @@ static int korina_close(struct net_device *dev) | |||
1064 | tmp = tmp | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR; | 1064 | tmp = tmp | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR; |
1065 | writel(tmp, &lp->rx_dma_regs->dmasm); | 1065 | writel(tmp, &lp->rx_dma_regs->dmasm); |
1066 | 1066 | ||
1067 | korina_free_ring(dev); | ||
1068 | |||
1069 | napi_disable(&lp->napi); | 1067 | napi_disable(&lp->napi); |
1070 | 1068 | ||
1071 | cancel_work_sync(&lp->restart_task); | 1069 | cancel_work_sync(&lp->restart_task); |
1072 | 1070 | ||
1071 | korina_free_ring(dev); | ||
1072 | |||
1073 | free_irq(lp->rx_irq, dev); | 1073 | free_irq(lp->rx_irq, dev); |
1074 | free_irq(lp->tx_irq, dev); | 1074 | free_irq(lp->tx_irq, dev); |
1075 | free_irq(lp->ovr_irq, dev); | 1075 | free_irq(lp->ovr_irq, dev); |