3 files changed, 27 insertions, 10 deletions

diff --git a/drivers/net/ppp_generic.c b/drivers/net/ppp_generic.c
index 1f4ca2b54a73..83625fdff3dd 100644
--- a/drivers/net/ppp_generic.c
+++ b/drivers/net/ppp_generic.c
@@ -39,6 +39,7 @@
 #include <linux/if_arp.h>
 #include <linux/ip.h>
 #include <linux/tcp.h>
+#include <linux/smp_lock.h>
 #include <linux/spinlock.h>
 #include <linux/rwsem.h>
 #include <linux/stddef.h>
@@ -353,6 +354,7 @@ static const int npindex_to_ethertype[NUM_NP] = {
  */
 static int ppp_open(struct inode *inode, struct file *file)
 {
+        cycle_kernel_lock();
         /*
          * This could (should?) be enforced by the permissions on /dev/ppp.
          */
diff --git a/drivers/net/tun.c b/drivers/net/tun.c
index b9018bfa0a97..eba1271b9735 100644
--- a/drivers/net/tun.c
+++ b/drivers/net/tun.c
@@ -48,6 +48,7 @@
 #include <linux/kernel.h>
 #include <linux/major.h>
 #include <linux/slab.h>
+#include <linux/smp_lock.h>
 #include <linux/poll.h>
 #include <linux/fcntl.h>
 #include <linux/init.h>
@@ -802,22 +803,26 @@ static int tun_chr_fasync(int fd, struct file *file, int on)
 
         DBG(KERN_INFO "%s: tun_chr_fasync %d\n", tun->dev->name, on);
 
+        lock_kernel();
         if ((ret = fasync_helper(fd, file, on, &tun->fasync)) < 0)
-                return ret;
+                goto out;
 
         if (on) {
                 ret = __f_setown(file, task_pid(current), PIDTYPE_PID, 0);
                 if (ret)
-                        return ret;
+                        goto out;
                 tun->flags |= TUN_FASYNC;
         } else
                 tun->flags &= ~TUN_FASYNC;
-
-        return 0;
+        ret = 0;
+out:
+        unlock_kernel();
+        return ret;
 }
 
 static int tun_chr_open(struct inode *inode, struct file * file)
 {
+        cycle_kernel_lock();
         DBG1(KERN_INFO "tunX: tun_chr_open\n");
         file->private_data = NULL;
         return 0;
diff --git a/drivers/net/wan/cosa.c b/drivers/net/wan/cosa.c
index b0fce1387eaf..5827324e9d9f 100644
--- a/drivers/net/wan/cosa.c
+++ b/drivers/net/wan/cosa.c
@@ -92,6 +92,7 @@
 #include <linux/spinlock.h>
 #include <linux/mutex.h>
 #include <linux/device.h>
+#include <linux/smp_lock.h>
 
 #undef COSA_SLOW_IO     /* for testing purposes only */
 
@@ -970,15 +971,21 @@ static int cosa_open(struct inode *inode, struct file *file)
         struct channel_data *chan;
         unsigned long flags;
         int n;
+        int ret = 0;
 
+        lock_kernel();
         if ((n=iminor(file->f_path.dentry->d_inode)>>CARD_MINOR_BITS)
-                >= nr_cards)
-                return -ENODEV;
+                >= nr_cards) {
+                ret = -ENODEV;
+                goto out;
+        }
         cosa = cosa_cards+n;
 
         if ((n=iminor(file->f_path.dentry->d_inode)
-                & ((1<<CARD_MINOR_BITS)-1)) >= cosa->nchannels)
-                return -ENODEV;
+                & ((1<<CARD_MINOR_BITS)-1)) >= cosa->nchannels) {
+                ret = -ENODEV;
+                goto out;
+        }
         chan = cosa->chan + n;
         
         file->private_data = chan;
@@ -987,7 +994,8 @@ static int cosa_open(struct inode *inode, struct file *file)
 
         if (chan->usage < 0) { /* in netdev mode */
                 spin_unlock_irqrestore(&cosa->lock, flags);
-                return -EBUSY;
+                ret = -EBUSY;
+                goto out;
         }
         cosa->usage++;
         chan->usage++;
@@ -996,7 +1004,9 @@ static int cosa_open(struct inode *inode, struct file *file)
         chan->setup_rx = chrdev_setup_rx;
         chan->rx_done = chrdev_rx_done;
         spin_unlock_irqrestore(&cosa->lock, flags);
-        return 0;
+out:
+        unlock_kernel();
+        return ret;
 }
 
 static int cosa_release(struct inode *inode, struct file *file)