Skip to main content

Browse the archive

https://github.com/torvalds/linux
05 April 2024, 19:05:47 UTC
Revision 78d0f94902afce8ec2c7a60f600cc0e3729d7412 authored by Julian Ruess on 13 June 2023, 12:25:37 UTC, committed by David S. Miller on 15 June 2023, 07:48:45 UTC 
s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
 
This patch prevents the system from crashing when unloading the ISM module.

How to reproduce: Attach an ISM device and execute 'rmmod ism'.

Error-Log:
- Trying to free already-free IRQ 0
- WARNING: CPU: 1 PID: 966 at kernel/irq/manage.c:1890 free_irq+0x140/0x540

After calling ism_dev_exit() for each ISM device in the exit routine,
pci_unregister_driver() will execute ism_remove() for each ISM device.
Because ism_remove() also calls ism_dev_exit(),
free_irq(pci_irq_vector(pdev, 0), ism) is called twice for each ISM
device. This results in a crash with the error
'Trying to free already-free IRQ'.

In the exit routine, it is enough to call pci_unregister_driver()
because it ensures that ism_dev_exit() is called once per
ISM device.

Cc: <stable@vger.kernel.org> # 6.3+
Fixes: 89e7d2ba61b7 ("net/ism: Add new API for client registration")
Reviewed-by: Niklas Schnelle <schnelle@linux.ibm.com>
Signed-off-by: Julian Ruess <julianr@linux.ibm.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 6ac7a27
History
Tip revision: 78d0f94902afce8ec2c7a60f600cc0e3729d7412 authored by Julian Ruess on 13 June 2023, 12:25:37 UTC
s390/ism: Fix trying to free already-freed IRQ by repeated ism_dev_exit()
Tip revision: 78d0f94
File Mode Size
Makefile -rw-r--r-- 361 bytes
compat.c -rw-r--r-- 2.2 KB
ipc_sysctl.c -rw-r--r-- 7.2 KB
mq_sysctl.c -rw-r--r-- 3.0 KB
mqueue.c -rw-r--r-- 43.7 KB
msg.c -rw-r--r-- 32.3 KB
msgutil.c -rw-r--r-- 3.6 KB
namespace.c -rw-r--r-- 5.8 KB
sem.c -rw-r--r-- 63.2 KB
shm.c -rw-r--r-- 45.0 KB
syscall.c -rw-r--r-- 5.1 KB
util.c -rw-r--r-- 24.2 KB
util.h -rw-r--r-- 8.8 KB
back to top