Skip to content

Commit 2f69a11

Browse files
jgross1bostrovs
authored andcommitted
xen/xenbus: fix locking
Commit 060eabe ("xenbus/backend: Protect xenbus callback with lock") introduced a bug by holding a lock while calling a function which might schedule. Fix that by using a semaphore instead. Fixes: 060eabe ("xenbus/backend: Protect xenbus callback with lock") Signed-off-by: Juergen Gross <[email protected]> Link: https://lore.kernel.org/r/[email protected] Reviewed-by: Boris Ostrovsky <[email protected]> Signed-off-by: Boris Ostrovsky <[email protected]>
1 parent 8130b9d commit 2f69a11

File tree

3 files changed

+10
-8
lines changed

3 files changed

+10
-8
lines changed

drivers/xen/xenbus/xenbus_probe.c

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -239,9 +239,9 @@ int xenbus_dev_probe(struct device *_dev)
239239
goto fail;
240240
}
241241

242-
spin_lock(&dev->reclaim_lock);
242+
down(&dev->reclaim_sem);
243243
err = drv->probe(dev, id);
244-
spin_unlock(&dev->reclaim_lock);
244+
up(&dev->reclaim_sem);
245245
if (err)
246246
goto fail_put;
247247

@@ -271,9 +271,9 @@ int xenbus_dev_remove(struct device *_dev)
271271
free_otherend_watch(dev);
272272

273273
if (drv->remove) {
274-
spin_lock(&dev->reclaim_lock);
274+
down(&dev->reclaim_sem);
275275
drv->remove(dev);
276-
spin_unlock(&dev->reclaim_lock);
276+
up(&dev->reclaim_sem);
277277
}
278278

279279
module_put(drv->driver.owner);
@@ -473,7 +473,7 @@ int xenbus_probe_node(struct xen_bus_type *bus,
473473
goto fail;
474474

475475
dev_set_name(&xendev->dev, "%s", devname);
476-
spin_lock_init(&xendev->reclaim_lock);
476+
sema_init(&xendev->reclaim_sem, 1);
477477

478478
/* Register with generic device framework. */
479479
err = device_register(&xendev->dev);

drivers/xen/xenbus/xenbus_probe_backend.c

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@
4545
#include <linux/mm.h>
4646
#include <linux/notifier.h>
4747
#include <linux/export.h>
48+
#include <linux/semaphore.h>
4849

4950
#include <asm/page.h>
5051
#include <asm/pgtable.h>
@@ -257,10 +258,10 @@ static int backend_reclaim_memory(struct device *dev, void *data)
257258
drv = to_xenbus_driver(dev->driver);
258259
if (drv && drv->reclaim_memory) {
259260
xdev = to_xenbus_device(dev);
260-
if (!spin_trylock(&xdev->reclaim_lock))
261+
if (down_trylock(&xdev->reclaim_sem))
261262
return 0;
262263
drv->reclaim_memory(xdev);
263-
spin_unlock(&xdev->reclaim_lock);
264+
up(&xdev->reclaim_sem);
264265
}
265266
return 0;
266267
}

include/xen/xenbus.h

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,7 @@
4242
#include <linux/completion.h>
4343
#include <linux/init.h>
4444
#include <linux/slab.h>
45+
#include <linux/semaphore.h>
4546
#include <xen/interface/xen.h>
4647
#include <xen/interface/grant_table.h>
4748
#include <xen/interface/io/xenbus.h>
@@ -76,7 +77,7 @@ struct xenbus_device {
7677
enum xenbus_state state;
7778
struct completion down;
7879
struct work_struct work;
79-
spinlock_t reclaim_lock;
80+
struct semaphore reclaim_sem;
8081
};
8182

8283
static inline struct xenbus_device *to_xenbus_device(struct device *dev)

0 commit comments

Comments
 (0)