RDMA/nes: Free IRQ before killing tasklet
authorRoland Dreier <rolandd@cisco.com>
Thu, 17 Apr 2008 04:09:34 +0000 (21:09 -0700)
committerRoland Dreier <rolandd@cisco.com>
Thu, 17 Apr 2008 04:09:34 +0000 (21:09 -0700)
commit4cd1e5eb3cbe6e0cc934959770b4c60eac6ecf66
treecf0a0219790a7fac9acf08727ad63de14c6c6bb4
parent940801b27e021b3494a44bc93be3c73fadbe4c2f
RDMA/nes: Free IRQ before killing tasklet

Move the free_irq() call in nes_remove() to before the tasklet_kill();
otherwise there is a window after tasklet_kill() where a new interrupt
can be handled and reschedule the tasklet, leading to a use-after-free
crash.

Cc: <stable@kernel.org>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/hw/nes/nes.c