A potential race in drivers/atm/eni.ko

From	Pavel Andrianov <andrianov@ispras.ru>
Newsgroups	linux.kernel
Subject	A potential race in drivers/atm/eni.ko
Date	2016-08-08 10:20 +0200
Message-ID	<s3NWW-7is-17@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi!

There is a potential race in drivers/atm/eni.ko.

In the interrupt handler eni_int the field eni_dev->events is masked 
(line 1519) with a spinlock protection. In eni_start eni_dev->events is 
initialized (line 1844), but it is done after interrupts are requested 
(line 1813). Thus, the interrupt may occur while initialization is not 
finishing and the new value of events will be lost. Moreover, the 
spinlock, which is used in the interrupt handler, is also initialized 
(line 1842) after request_irq (line 1813).

-- 
Pavel Andrianov
Linux Verification Center, ISPRAS
web: http://linuxtesting.org
e-mail: andrianov@ispras.ru

Back to linux.kernel | Previous | Next | Find similar | Unroll thread

Thread

A potential race in drivers/atm/eni.ko Pavel Andrianov <andrianov@ispras.ru> - 2016-08-08 10:20 +0200

csiph-web