Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754742AbYCUEUZ (ORCPT ); Fri, 21 Mar 2008 00:20:25 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751433AbYCUEUK (ORCPT ); Fri, 21 Mar 2008 00:20:10 -0400 Received: from fgwmail7.fujitsu.co.jp ([192.51.44.37]:45207 "EHLO fgwmail7.fujitsu.co.jp" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751170AbYCUEUJ (ORCPT ); Fri, 21 Mar 2008 00:20:09 -0400 Message-ID: <47E33671.1000107@jp.fujitsu.com> Date: Fri, 21 Mar 2008 13:15:45 +0900 From: Kenji Kaneshige User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) MIME-Version: 1.0 To: Alex Chiang , Greg KH CC: Gary Hade , Kristen Carlson Accardi , Matthew Wilcox , warthog19@eaglescrag.net, rick.jones2@hp.com, linux-kernel@vger.kernel.org, linux-pci@atrey.karlin.mff.cuni.cz, linux-acpi@vger.kernel.org Subject: [PATCH 8/16][BUG] PCI slot: Fix invalid memory access (Not for mainline!) References: <20080318210539.GA30421@ldl.fc.hp.com> <47E33472.1000602@jp.fujitsu.com> In-Reply-To: <47E33472.1000602@jp.fujitsu.com> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1377 Lines: 41 Fix kernel oops in pci_release_slot() when dbg() is enabled. The dbg() in pci_release_slot() cause a kernel oops (invalid memory access) because it accesses slot after it is released. We need to access slot before calling kobject_put(). Signed-off-by: Kenji Kaneshige --- drivers/pci/slot.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) Index: linux-2.6.25-rc6/drivers/pci/slot.c =================================================================== --- linux-2.6.25-rc6.orig/drivers/pci/slot.c +++ linux-2.6.25-rc6/drivers/pci/slot.c @@ -191,13 +191,14 @@ EXPORT_SYMBOL_GPL(pci_create_slot); int pci_destroy_slot(struct pci_slot *slot) { + dbg("%s: decreased refcount to %d on %x:%d\n", __func__, + atomic_read(&slot->kobj.kref.refcount) - 1, slot->bus->number, + slot->number); + down_write(&pci_bus_sem); kobject_put(&slot->kobj); up_write(&pci_bus_sem); - dbg("%s: decreased refcount to %d on %x:%d\n", __func__, - atomic_read(&slot->kobj.kref.refcount), slot->bus->number, - slot->number); return 0; } EXPORT_SYMBOL_GPL(pci_destroy_slot); -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/