Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755898AbYFVR67 (ORCPT ); Sun, 22 Jun 2008 13:58:59 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752394AbYFVR6v (ORCPT ); Sun, 22 Jun 2008 13:58:51 -0400 Received: from casper.infradead.org ([85.118.1.10]:33311 "EHLO casper.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751165AbYFVR6u (ORCPT ); Sun, 22 Jun 2008 13:58:50 -0400 Date: Sun, 22 Jun 2008 10:58:32 -0700 From: Arjan van de Ven To: Marcin Slusarz Cc: mchehab@infradead.org, linux-kernel@vger.kernel.org, Al Viro Subject: Re: [PATCH] Fix open/close race in saa7134 Message-ID: <20080622105832.1c61fb92@infradead.org> In-Reply-To: <20080622172826.GA7487@joi> References: <20080622100507.779acc59@infradead.org> <20080622172826.GA7487@joi> Organization: Intel X-Mailer: Claws Mail 3.3.1 (GTK+ 2.12.10; i386-redhat-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-SRS-Rewrite: SMTP reverse-path rewritten from by casper.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1483 Lines: 36 On Sun, 22 Jun 2008 19:33:37 +0200 Marcin Slusarz wrote: > On Sun, Jun 22, 2008 at 10:05:07AM -0700, Arjan van de Ven wrote: > > > > From: Arjan van de Ven > > Date: Sun, 22 Jun 2008 10:03:02 -0700 > > Subject: [PATCH] Fix open/close race in saa7134 > > > > The saa7134 driver uses a (non-atomic) variable in an attempt to > > only allow one opener of the device (how it deals with sending > > the fd over unix sockets I don't know). > > > > Unfortunately, the release function first decrements this variable, > > and THEN goes on to disable more of the device. This allows for > > a race where another opener of the device comes in after the > > decrement of the variable, configures the hardware just to then see > > the hardware be disabled by the rest of the release function. > > Simplier fix: > http://lkml.org/lkml/2008/6/9/308 > But I don't remember whether it was applied or not... the patch might be simpler, but it's not fully correct... the decrement is non-atomic and not protected by any lock whatsoever. -- If you want to reach me at my work email, use arjan@linux.intel.com For development, discussion and tips for power savings, visit http://www.lesswatts.org -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/