Rafael J. Wysocki af9d8adc6b ACPI / hotplug / PCI: Fix bridge removal race vs dock events ... If a PCI bridge with an ACPIPHP context attached is removed via sysfs, the code path executed as a result is the following: pci_stop_and_remove_bus_device_locked pci_remove_bus pcibios_remove_bus acpi_pci_remove_bus acpiphp_remove_slots cleanup_bridge unregister_hotplug_dock_device (drops dock references to the bridge) put_bridge free_bridge acpiphp_put_context (for each child, under context lock) kfree (context) Now, if a dock event affecting one of the bridge's child devices occurs (roughly at the same time), it will lead to the following code path: acpi_dock_deferred_cb dock_notify handle_eject_request hot_remove_dock_devices dock_hotplug_event hotplug_event (dereferences context) That may lead to a kernel crash in hotplug_event() if it is executed after the last kfree() in the bridge removal code path. To prevent that from happening, add a wrapper around hotplug_event() called dock_event() and point the .handler pointer in acpiphp_dock_ops to it. Make that wrapper retrieve the device's ACPIPHP context using acpiphp_get_context() (instead of taking it from the data argument) under acpiphp_context_lock and check if the parent bridge's is_going_away flag is set. If that flag is set, it will return immediately and if it is not set it will grab a reference to the device's parent bridge before executing hotplug_event(). Then, in the above scenario, the reference to the parent bridge held by dock_event() will prevent free_bridge() from being executed for it until hotplug_event() returns. Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>		2014-02-03 22:30:15 +01:00
..
host	ARM: SoC cleanups for 3.14	2014-01-23 18:36:55 -08:00
hotplug	ACPI / hotplug / PCI: Fix bridge removal race vs dock events	2014-02-03 22:30:15 +01:00
pcie
access.c
ats.c
bus.c
host-bridge.c
hotplug-pci.c
htirq.c
ioapic.c	ACPI and power management updates for 3.14-rc1	2014-01-24 15:51:02 -08:00
iov.c
irq.c
Kconfig
Makefile
msi.c
of.c
pci-acpi.c	ACPI and power management updates for 3.14-rc1	2014-01-24 15:51:02 -08:00
pci-driver.c
pci-label.c	ACPI and power management updates for 3.14-rc1	2014-01-24 15:51:02 -08:00
pci-stub.c
pci-sysfs.c
pci.c
pci.h
probe.c	Revert "PCI: Remove from bus_list and release resources in pci_release_dev()"	2014-02-01 10:24:31 -08:00
proc.c
quirks.c
remove.c	Revert "PCI: Remove from bus_list and release resources in pci_release_dev()"	2014-02-01 10:24:31 -08:00
rom.c
search.c
setup-bus.c
setup-irq.c
setup-res.c
slot.c
syscall.c
vc.c
vpd.c
xen-pcifront.c