• Ahmed S. Darwish's avatar
    can: kvaser_usb: Fix tx queue start/stop race conditions · a9dc960c
    Ahmed S. Darwish authored
    A number of tx queue wake-up events went missing due to the
    outlined scenario below. Start state is a pool of 16 tx URBs,
    active tx_urbs count = 15, with the netdev tx queue open.
    
    CPU #1 [softirq]                         CPU #2 [softirq]
    start_xmit()                             tx_acknowledge()
    ................                         ................
    
    atomic_inc(&tx_urbs);
    if (atomic_read(&tx_urbs) >= 16) {
                            -->
                                             atomic_dec(&tx_urbs);
                                             netif_wake_queue();
                                             return;
                            <--
        netif_stop_queue();
    }
    
    At the end, the correct state expected is a 15 tx_urbs count
    value with the tx queue state _open_. Due to the race, we get
    the same tx_urbs value but with the tx queue state _stopped_.
    The wake-up event is completely lost.
    
    Thus avoid hand-rolled concurrency mechanisms and use a proper
    lock for contexts and tx queue protection.
    Signed-off-by: default avatarAhmed S. Darwish <ahmed.darwish@valeo.com>
    Cc: linux-stable <stable@vger.kernel.org>
    Signed-off-by: default avatarMarc Kleine-Budde <mkl@pengutronix.de>
    a9dc960c
kvaser_usb.c 49.5 KB