ASoC: Intel: Cancel hsw_notification_work before freeing the stream
authorJarkko Nikula <jarkko.nikula@linux.intel.com>
Thu, 24 Apr 2014 07:34:36 +0000 (10:34 +0300)
committerMark Brown <broonie@linaro.org>
Thu, 24 Apr 2014 10:32:23 +0000 (11:32 +0100)
commitde30a2ccb20d9baf5dac8a9c8ba8f0d9d5f4361e
tree1cc24f2b3e6bbd1727f7cc758fa126c3cab9cc39
parentd132cb0a162fa55c82e06b771fcaa871d30c9398
ASoC: Intel: Cancel hsw_notification_work before freeing the stream

I suppose there is a possibility that hsw_notification_work() may run after
sst_hsw_stream_free() which can lead to a kernel crash since struct
sst_hsw_stream is freed at that point and
stream = container_of(work, struct sst_hsw_stream, notify_work) is not valid
when hsw_notification_work() is run.

Reported-by: Derek Basehore <dbasehore@chromium.org>
Reported-by: Wenkai Du <wenkai.du@intel.com>
Signed-off-by: Jarkko Nikula <jarkko.nikula@linux.intel.com>
Signed-off-by: Mark Brown <broonie@linaro.org>
sound/soc/intel/sst-haswell-ipc.c