1 files changed, 17 insertions, 4 deletions

diff --git a/drivers/acpi/dock.c b/drivers/acpi/dock.c
index 78648f811049..4fdea381ef21 100644
--- a/drivers/acpi/dock.c
+++ b/drivers/acpi/dock.c
@@ -744,7 +744,9 @@ static void acpi_dock_deferred_cb(void *context)
 {
         struct dock_data *data = context;
 
+        acpi_scan_lock_acquire();
         dock_notify(data->handle, data->event, data->ds);
+        acpi_scan_lock_release();
         kfree(data);
 }
 
@@ -757,20 +759,31 @@ static int acpi_dock_notifier_call(struct notifier_block *this,
         if (event != ACPI_NOTIFY_BUS_CHECK && event != ACPI_NOTIFY_DEVICE_CHECK
            && event != ACPI_NOTIFY_EJECT_REQUEST)
                 return 0;
+
+        acpi_scan_lock_acquire();
+
         list_for_each_entry(dock_station, &dock_stations, sibling) {
                 if (dock_station->handle == handle) {
                         struct dock_data *dd;
+                        acpi_status status;
 
                         dd = kmalloc(sizeof(*dd), GFP_KERNEL);
                         if (!dd)
-                                return 0;
+                                break;
+
                         dd->handle = handle;
                         dd->event = event;
                         dd->ds = dock_station;
-                        acpi_os_hotplug_execute(acpi_dock_deferred_cb, dd);
-                        return 0 ;
+                        status = acpi_os_hotplug_execute(acpi_dock_deferred_cb,
+                                                         dd);
+                        if (ACPI_FAILURE(status))
+                                kfree(dd);
+
+                        break;
                 }
         }
+
+        acpi_scan_lock_release();
         return 0;
 }
 
@@ -825,7 +838,7 @@ static ssize_t show_docked(struct device *dev,
 
         struct dock_station *dock_station = dev->platform_data;
 
-        if (ACPI_SUCCESS(acpi_bus_get_device(dock_station->handle, &tmp)))
+        if (!acpi_bus_get_device(dock_station->handle, &tmp))
                 return snprintf(buf, PAGE_SIZE, "1\n");
         return snprintf(buf, PAGE_SIZE, "0\n");
 }