mlx4_core: Fix potential deadlock in mlx4_eq_int()

The slave_state_lock spinlock is used in both interrupt context and
process context, hence irq locking must be used.  Found by lockdep.

Signed-off-by: Jack Morgenstein <jackm@dev.mellanox.co.il>
Signed-off-by: Or Gerlitz <ogerlitz@mellanox.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Roland Dreier <roland@purestorage.com>

1 files changed, 5 insertions, 4 deletions

diff --git a/drivers/net/ethernet/mellanox/mlx4/cmd.c b/drivers/net/ethernet/mellanox/mlx4/cmd.c
index e791e705f7b1..fdc5f23d8e9f 100644
--- a/drivers/net/ethernet/mellanox/mlx4/cmd.c
+++ b/drivers/net/ethernet/mellanox/mlx4/cmd.c
@@ -1498,6 +1498,7 @@ static void mlx4_master_do_cmd(struct mlx4_dev *dev, int slave, u8 cmd,
         u32 reply;
         u8 is_going_down = 0;
         int i;
+        unsigned long flags;
 
         slave_state[slave].comm_toggle ^= 1;
         reply = (u32) slave_state[slave].comm_toggle << 31;
@@ -1576,12 +1577,12 @@ static void mlx4_master_do_cmd(struct mlx4_dev *dev, int slave, u8 cmd,
                 mlx4_warn(dev, "Bad comm cmd:%d from slave:%d\n", cmd, slave);
                 goto reset_slave;
         }
-        spin_lock(&priv->mfunc.master.slave_state_lock);
+        spin_lock_irqsave(&priv->mfunc.master.slave_state_lock, flags);
         if (!slave_state[slave].is_slave_going_down)
                 slave_state[slave].last_cmd = cmd;
         else
                 is_going_down = 1;
-        spin_unlock(&priv->mfunc.master.slave_state_lock);
+        spin_unlock_irqrestore(&priv->mfunc.master.slave_state_lock, flags);
         if (is_going_down) {
                 mlx4_warn(dev, "Slave is going down aborting command(%d)"
                           " executing from slave:%d\n",
@@ -1597,10 +1598,10 @@ static void mlx4_master_do_cmd(struct mlx4_dev *dev, int slave, u8 cmd,
 reset_slave:
         /* cleanup any slave resources */
         mlx4_delete_all_resources_for_slave(dev, slave);
-        spin_lock(&priv->mfunc.master.slave_state_lock);
+        spin_lock_irqsave(&priv->mfunc.master.slave_state_lock, flags);
         if (!slave_state[slave].is_slave_going_down)
                 slave_state[slave].last_cmd = MLX4_COMM_CMD_RESET;
-        spin_unlock(&priv->mfunc.master.slave_state_lock);
+        spin_unlock_irqrestore(&priv->mfunc.master.slave_state_lock, flags);
         /*with slave in the middle of flr, no need to clean resources again.*/
 inform_slave_state:
         memset(&slave_state[slave].event_eq, 0,