| From 8a0e324853d0a18a80b7593bc2c53d38dfbbdee7 Mon Sep 17 00:00:00 2001 |
| From: Lars-Peter Clausen <lars@metafoo.de> |
| Date: Thu, 16 Jan 2020 15:29:01 +0200 |
| Subject: [PATCH] usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags |
| |
| commit 43d565727a3a6fd24e37c7c2116475106af71806 upstream. |
| |
| ffs_aio_cancel() can be called from both interrupt and thread context. Make |
| sure that the current IRQ state is saved and restored by using |
| spin_{un,}lock_irq{save,restore}(). |
| |
| Otherwise undefined behavior might occur. |
| |
| Acked-by: Michal Nazarewicz <mina86@mina86.com> |
| Signed-off-by: Lars-Peter Clausen <lars@metafoo.de> |
| Signed-off-by: Alexandru Ardelean <alexandru.ardelean@analog.com> |
| Signed-off-by: Felipe Balbi <balbi@kernel.org> |
| Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> |
| |
| diff --git a/drivers/usb/gadget/function/f_fs.c b/drivers/usb/gadget/function/f_fs.c |
| index 9a4707a934a6..265e3e523ef3 100644 |
| --- a/drivers/usb/gadget/function/f_fs.c |
| +++ b/drivers/usb/gadget/function/f_fs.c |
| @@ -1161,18 +1161,19 @@ static int ffs_aio_cancel(struct kiocb *kiocb) |
| { |
| struct ffs_io_data *io_data = kiocb->private; |
| struct ffs_epfile *epfile = kiocb->ki_filp->private_data; |
| + unsigned long flags; |
| int value; |
| |
| ENTER(); |
| |
| - spin_lock_irq(&epfile->ffs->eps_lock); |
| + spin_lock_irqsave(&epfile->ffs->eps_lock, flags); |
| |
| if (likely(io_data && io_data->ep && io_data->req)) |
| value = usb_ep_dequeue(io_data->ep, io_data->req); |
| else |
| value = -EINVAL; |
| |
| - spin_unlock_irq(&epfile->ffs->eps_lock); |
| + spin_unlock_irqrestore(&epfile->ffs->eps_lock, flags); |
| |
| return value; |
| } |
| -- |
| 2.7.4 |
| |
