diff options
| author | Florian Fainelli <f.fainelli@gmail.com> | 2016-12-23 22:56:56 -0500 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-12-26 11:26:16 -0500 |
| commit | e6afb1ad88feddf2347ea779cfaf4d03d3cd40b6 (patch) | |
| tree | 798d9bc9325e7c42befe995e6ab55ebf8cc4759a | |
| parent | 628185cfddf1dfb701c4efe2cfd72cf5b09f5702 (diff) | |
net: korina: Fix NAPI versus resources freeing
Commit beb0babfb77e ("korina: disable napi on close and restart")
introduced calls to napi_disable() that were missing before,
unfortunately this leaves a small window during which NAPI has a chance
to run, yet we just freed resources since korina_free_ring() has been
called:
Fix this by disabling NAPI first then freeing resource, and make sure
that we also cancel the restart task before doing the resource freeing.
Fixes: beb0babfb77e ("korina: disable napi on close and restart")
Reported-by: Alexandros C. Couloumbis <alex@ozo.com>
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | drivers/net/ethernet/korina.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/drivers/net/ethernet/korina.c b/drivers/net/ethernet/korina.c index cbeea915f026..8037426ec50f 100644 --- a/drivers/net/ethernet/korina.c +++ b/drivers/net/ethernet/korina.c | |||
| @@ -900,10 +900,10 @@ static void korina_restart_task(struct work_struct *work) | |||
| 900 | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR, | 900 | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR, |
| 901 | &lp->rx_dma_regs->dmasm); | 901 | &lp->rx_dma_regs->dmasm); |
| 902 | 902 | ||
| 903 | korina_free_ring(dev); | ||
| 904 | |||
| 905 | napi_disable(&lp->napi); | 903 | napi_disable(&lp->napi); |
| 906 | 904 | ||
| 905 | korina_free_ring(dev); | ||
| 906 | |||
| 907 | if (korina_init(dev) < 0) { | 907 | if (korina_init(dev) < 0) { |
| 908 | printk(KERN_ERR "%s: cannot restart device\n", dev->name); | 908 | printk(KERN_ERR "%s: cannot restart device\n", dev->name); |
| 909 | return; | 909 | return; |
| @@ -1064,12 +1064,12 @@ static int korina_close(struct net_device *dev) | |||
| 1064 | tmp = tmp | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR; | 1064 | tmp = tmp | DMA_STAT_DONE | DMA_STAT_HALT | DMA_STAT_ERR; |
| 1065 | writel(tmp, &lp->rx_dma_regs->dmasm); | 1065 | writel(tmp, &lp->rx_dma_regs->dmasm); |
| 1066 | 1066 | ||
| 1067 | korina_free_ring(dev); | ||
| 1068 | |||
| 1069 | napi_disable(&lp->napi); | 1067 | napi_disable(&lp->napi); |
| 1070 | 1068 | ||
| 1071 | cancel_work_sync(&lp->restart_task); | 1069 | cancel_work_sync(&lp->restart_task); |
| 1072 | 1070 | ||
| 1071 | korina_free_ring(dev); | ||
| 1072 | |||
| 1073 | free_irq(lp->rx_irq, dev); | 1073 | free_irq(lp->rx_irq, dev); |
| 1074 | free_irq(lp->tx_irq, dev); | 1074 | free_irq(lp->tx_irq, dev); |
| 1075 | free_irq(lp->ovr_irq, dev); | 1075 | free_irq(lp->ovr_irq, dev); |
