Re: [PATCH] w1_therm reference count family data

[Evgeniy Polyakov]

Hi

09.05.2015, 03:52, "David Fries" <David@xxxxxxxxx>:
> A temperature conversion can take 750 ms and when possible the
> w1_therm slave driver drops the bus_mutex to allow other bus
> operations, but that includes operations such as a periodic slave
> search, which can remove this slave when it is no longer detected.
> If that happens the sl->family_data will be freed and set to NULL
> causing w1_slave_show to crash when it wakes up.
>
> Signed-off-by: David Fries <David@xxxxxxxxx>
> Reported-By: Thorsten Bschorr <thorsten@xxxxxxxxxx>
> Tested-by: Thorsten Bschorr <thorsten@xxxxxxxxxx>
> Acked-by: Evgeniy Polyakov <zbr@xxxxxxxxxxx>
> ---
> This should be applied to the stable series as well.  In the name of
> full disclosure, this just narrows the race window, from crashing in
> normal operation on the reporters system to no longer crashing with
> multiple readers and another process hammering on inserting/removing
> the slave device.

Greg, please pull it upstream
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/