USB: serial: fix missing locking on fifo in write callback
authorJohan Hovold <jhovold@gmail.com>
Wed, 17 Mar 2010 22:00:43 +0000 (23:00 +0100)
committerGreg Kroah-Hartman <gregkh@suse.de>
Thu, 20 May 2010 20:21:33 +0000 (13:21 -0700)
On errors the fifo was reset without any locking. This could race with
write which do kfifo_put and perhaps also chars_in_buffer and write_room.

Every other access to the fifo is protected using the port lock so
better add it to the error path as well.

Signed-off-by: Johan Hovold <jhovold@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
drivers/usb/serial/generic.c

index 8f78d7b8e888b2ded9240080a323bcf74494e1ae..2a3196a2c66c4cbcc98579c7985d1b24c468ccf9 100644 (file)
@@ -519,10 +519,13 @@ void usb_serial_generic_write_bulk_callback(struct urb *urb)
                port->write_urb_busy = 0;
                spin_unlock_irqrestore(&port->lock, flags);
 
-               if (status)
+               if (status) {
+                       spin_lock_irqsave(&port->lock, flags);
                        kfifo_reset_out(&port->write_fifo);
-               else
+                       spin_unlock_irqrestore(&port->lock, flags);
+               } else {
                        usb_serial_generic_write_start(port);
+               }
        }
 
        if (status)