Commit 5b064708 authored by Oliver Neukum's avatar Oliver Neukum Committed by Greg Kroah-Hartman

USB: fix autosuspend race in skeleton driver

as the skeleton driver was made ready for autosuspend a race condition
was introduced. The reference to get device must be gotten before the
autosuspend counter is upped, as this operation may sleep, dropping BKL.
Dropping BKL means that the pointer to the device may become invalid.
Here's the fix.
Signed-off-by: default avatarOliver Neukum <oneukum@suse.de>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@suse.de>
parent 57e4f041
...@@ -90,13 +90,15 @@ static int skel_open(struct inode *inode, struct file *file) ...@@ -90,13 +90,15 @@ static int skel_open(struct inode *inode, struct file *file)
goto exit; goto exit;
} }
/* increment our usage count for the device */
kref_get(&dev->kref);
/* prevent the device from being autosuspended */ /* prevent the device from being autosuspended */
retval = usb_autopm_get_interface(interface); retval = usb_autopm_get_interface(interface);
if (retval) if (retval) {
kref_put(&dev->kref, skel_delete);
goto exit; goto exit;
}
/* increment our usage count for the device */
kref_get(&dev->kref);
/* save our object in the file's private structure */ /* save our object in the file's private structure */
file->private_data = dev; file->private_data = dev;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment