2010-06-07 07:52:35

by Juuso Oikarinen

[permalink] [raw]
Subject: [PATCH] mac80211: Add netif state checking to ieee80211_ifa_changed

There's a window for ieee80211_ifa_changed() to get called whilst the
managed mode mutex has not been initialized when opening and stopping the
interface. Currently this causes a kernel BUG like the following:

[ 132.460013] kernel BUG at /home/wifi/iwlwifi-2.6/net/mac80211/main.c:380!
[ 132.460013] invalid opcode: 0000 [#1] SMP

The mutex is initialized during open(), hence once netif_running() is true,
the mutex should be valid. Fix by adding a netif_running() check to the
function.

Reported-by: Reinette Chatre <[email protected]>
Signed-off-by: Juuso Oikarinen <[email protected]>
---
net/mac80211/main.c | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/net/mac80211/main.c b/net/mac80211/main.c
index 5706156..88b671a 100644
--- a/net/mac80211/main.c
+++ b/net/mac80211/main.c
@@ -359,6 +359,9 @@ static int ieee80211_ifa_changed(struct notifier_block *nb,
struct ieee80211_sub_if_data *sdata;
struct ieee80211_if_managed *ifmgd;

+ if (!netif_running(ndev))
+ return NOTIFY_DONE;
+
/* Make sure it's our interface that got changed */
if (!wdev)
return NOTIFY_DONE;
--
1.6.3.3



2010-06-07 16:52:24

by Reinette Chatre

[permalink] [raw]
Subject: Re: [PATCH] mac80211: Add netif state checking to ieee80211_ifa_changed

Hi Juuso,

On Mon, 2010-06-07 at 00:52 -0700, Juuso Oikarinen wrote:
> There's a window for ieee80211_ifa_changed() to get called whilst the
> managed mode mutex has not been initialized when opening and stopping the
> interface. Currently this causes a kernel BUG like the following:
>
> [ 132.460013] kernel BUG at /home/wifi/iwlwifi-2.6/net/mac80211/main.c:380!
> [ 132.460013] invalid opcode: 0000 [#1] SMP
>
> The mutex is initialized during open(), hence once netif_running() is true,
> the mutex should be valid. Fix by adding a netif_running() check to the
> function.
>
> Reported-by: Reinette Chatre <[email protected]>
> Signed-off-by: Juuso Oikarinen <[email protected]>

Thank you very much. I've been running with this patch for more than ten
iterations of my testing and I have not encountered this issue again.

Tested-by: Reinette Chatre <[email protected]>

Reinette