]> git.karo-electronics.de Git - karo-tx-linux.git/commit
RDMA/nes: Free IRQ before killing tasklet
authorRoland Dreier <rolandd@cisco.com>
Fri, 18 Apr 2008 16:25:17 +0000 (16:25 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 1 May 2008 21:44:34 +0000 (14:44 -0700)
commit2bef74464c8f5b9da0cb489c9867cf88bd5a735a
treef3454c41648c15e5c68f2fa37ff6285a50df52ef
parentbc657c218dc4f0d8fbb5fb9c746c0dd9736e128a
RDMA/nes: Free IRQ before killing tasklet

commit: 4cd1e5eb3cbe6e0cc934959770b4c60eac6ecf66

Move the free_irq() call in nes_remove() to before the tasklet_kill();
otherwise there is a window after tasklet_kill() where a new interrupt
can be handled and reschedule the tasklet, leading to a use-after-free
crash.

Signed-off-by: Roland Dreier <rolandd@cisco.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/infiniband/hw/nes/nes.c