um: winch_interrupt() can happen inside of free_winch()
authorAl Viro <viro@ftp.linux.org.uk>
Wed, 14 Sep 2011 23:21:28 +0000 (16:21 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Thu, 15 Sep 2011 01:09:37 +0000 (18:09 -0700)
...  so set winch->fd to -1 before doing free_irq(), to avoid having
winch_interrupt() come from/during the latter and attempt to do
reactivate_fd() on something that's already gone.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
arch/um/drivers/line.c

index c5bff1ddeabc09a735d2689675b1a6342656cb35..91bf18941ca4c8edc9008aa7b88562c198698f18 100644 (file)
@@ -725,6 +725,8 @@ struct winch {
 
 static void free_winch(struct winch *winch, int free_irq_ok)
 {
+       int fd = winch->fd;
+       winch->fd = -1;
        if (free_irq_ok)
                free_irq(WINCH_IRQ, winch);
 
@@ -732,8 +734,8 @@ static void free_winch(struct winch *winch, int free_irq_ok)
 
        if (winch->pid != -1)
                os_kill_process(winch->pid, 1);
-       if (winch->fd != -1)
-               os_close_file(winch->fd);
+       if (fd != -1)
+               os_close_file(fd);
        if (winch->stack != 0)
                free_stack(winch->stack, 0);
        kfree(winch);