Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757728AbZC3C0V (ORCPT ); Sun, 29 Mar 2009 22:26:21 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1756167AbZC3C0J (ORCPT ); Sun, 29 Mar 2009 22:26:09 -0400 Received: from fgwmail5.fujitsu.co.jp ([192.51.44.35]:50214 "EHLO fgwmail5.fujitsu.co.jp" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755753AbZC3C0I (ORCPT ); Sun, 29 Mar 2009 22:26:08 -0400 Message-ID: <49D02DAD.2040607@jp.fujitsu.com> Date: Mon, 30 Mar 2009 11:25:49 +0900 From: Kenji Kaneshige User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: Alex Chiang CC: jbarnes@virtuousgeek.org, linux-pci@vger.kernel.org, linux-kernel@vger.kernel.org, lenb@kernel.org Subject: Re: [PATCH 3/3] PCI: pci_slot: grab refcount on slot's bus References: <20090329165352.29073.5159.stgit@bob.kio> <20090329165454.29073.1180.stgit@bob.kio> In-Reply-To: <20090329165454.29073.1180.stgit@bob.kio> Content-Type: text/plain; charset=ISO-2022-JP Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 3259 Lines: 93 Alex Chiang wrote: > If a logical hot unplug (remove) is performed on a physical PCI slot's > parent bridge, and then pci_slot is unloaded, we will encounter an oops: > > [] kobject_release+0x9a/0x290 > [] ? kobject_release+0x0/0x290 > [] kref_put+0x37/0x80 > [] kobject_put+0x27/0x60 > [] ? pci_destroy_slot+0x3c/0xc0 > [] pci_destroy_slot+0x45/0xc0 > [] acpi_pci_slot_remove+0x5c/0x91 [pci_slot] > [] acpi_pci_unregister_driver+0x4b/0x62 > [] acpi_pci_slot_exit+0x10/0x12 [pci_slot] > [] sys_delete_module+0x161/0x250 > > We need to grab a reference to the parent PCI bus, which will pin > the bus and prevent it from being released until pci_slot is unloaded. > > Cc: lenb@kernel.org > Reported-by: Kenji Kaneshige > Signed-off-by: Alex Chiang > --- > > drivers/acpi/pci_slot.c | 5 +++++ > 1 files changed, 5 insertions(+), 0 deletions(-) > > diff --git a/drivers/acpi/pci_slot.c b/drivers/acpi/pci_slot.c > index cd1f446..c7ad9f2 100644 > --- a/drivers/acpi/pci_slot.c > +++ b/drivers/acpi/pci_slot.c > @@ -63,6 +63,7 @@ struct acpi_pci_slot { > acpi_handle root_handle; /* handle of the root bridge */ > struct pci_slot *pci_slot; /* corresponding pci_slot */ > struct list_head list; /* node in the list of slots */ > + struct pci_bus *bus; /* bus the slot is on */ > }; I don't think we need an additional 'bus' field in the struct acpi_pci_slot. At the register_slot(), we already know the address of struct pci_bus. At the acpi_pci_slot_remove(), I think we can get the address of struct pci_bus as follows. if (slot->root_handle == handle) { struct pci_bus *pbus = slot->pci_slot->bus; list_del(&slot->list); pci_destroy_slot(slot->pci_slot); put_device(&pbus->dev); kfree(slot); } Thanks, Kenji Kaneshige > > static int acpi_pci_slot_add(acpi_handle handle); > @@ -159,11 +160,14 @@ register_slot(acpi_handle handle, u32 lvl, void *context, void **rv) > > slot->root_handle = parent_context->root_handle; > slot->pci_slot = pci_slot; > + slot->bus = pci_bus; > INIT_LIST_HEAD(&slot->list); > mutex_lock(&slot_list_lock); > list_add(&slot->list, &slot_list); > mutex_unlock(&slot_list_lock); > > + get_device(&pci_bus->dev); > + > dbg("pci_slot: %p, pci_bus: %x, device: %d, name: %s\n", > pci_slot, pci_bus->number, device, name); > > @@ -316,6 +320,7 @@ acpi_pci_slot_remove(acpi_handle handle) > if (slot->root_handle == handle) { > list_del(&slot->list); > pci_destroy_slot(slot->pci_slot); > + put_device(&slot->bus->dev); > kfree(slot); > } > } > > -- > To unsubscribe from this list: send the line "unsubscribe linux-pci" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/