Messages in this thread | | | From | Evgeniy Polyakov <> | Subject | Re: [PATCH] w1_therm reference count family data | Date | Wed, 13 May 2015 17:59:51 +0300 |
| |
Hi
09.05.2015, 03:52, "David Fries" <David@Fries.net>: > A temperature conversion can take 750 ms and when possible the > w1_therm slave driver drops the bus_mutex to allow other bus > operations, but that includes operations such as a periodic slave > search, which can remove this slave when it is no longer detected. > If that happens the sl->family_data will be freed and set to NULL > causing w1_slave_show to crash when it wakes up. > > Signed-off-by: David Fries <David@Fries.net> > Reported-By: Thorsten Bschorr <thorsten@bschorr.de> > Tested-by: Thorsten Bschorr <thorsten@bschorr.de> > Acked-by: Evgeniy Polyakov <zbr@ioremap.net> > --- > This should be applied to the stable series as well. In the name of > full disclosure, this just narrows the race window, from crashing in > normal operation on the reporters system to no longer crashing with > multiple readers and another process hammering on inserting/removing > the slave device.
Greg, please pull it upstream
| |