From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S965716AbcBDEEm (ORCPT ); Wed, 3 Feb 2016 23:04:42 -0500 Received: from mailout.easymail.ca ([64.68.201.169]:43546 "EHLO mailout.easymail.ca" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S965692AbcBDEEi (ORCPT ); Wed, 3 Feb 2016 23:04:38 -0500 X-Quarantine-ID: X-Amavis-Alert: BAD HEADER SECTION, Duplicate header field: "References" X-Spam-Flag: NO X-Spam-Score: -3.678 From: Shuah Khan To: mchehab@osg.samsung.com, tiwai@suse.com, clemens@ladisch.de, hans.verkuil@cisco.com, laurent.pinchart@ideasonboard.com, sakari.ailus@linux.intel.com, javier@osg.samsung.com Cc: Shuah Khan , pawel@osciak.com, m.szyprowski@samsung.com, kyungmin.park@samsung.com, perex@perex.cz, arnd@arndb.de, dan.carpenter@oracle.com, tvboxspy@gmail.com, crope@iki.fi, ruchandani.tina@gmail.com, corbet@lwn.net, chehabrafael@gmail.com, k.kozlowski@samsung.com, stefanr@s5r6.in-berlin.de, inki.dae@samsung.com, jh1009.sung@samsung.com, elfring@users.sourceforge.net, prabhakar.csengg@gmail.com, sw0312.kim@samsung.com, p.zabel@pengutronix.de, ricardo.ribalda@gmail.com, labbott@fedoraproject.org, pierre-louis.bossart@linux.intel.com, ricard.wanderlof@axis.com, julian@jusst.de, takamichiho@gmail.com, dominic.sacre@gmx.de, misterpib@gmail.com, daniel@zonque.org, gtmkramer@xs4all.nl, normalperson@yhbt.net, joe@oampo.co.uk, linuxbugs@vittgam.net, johan@oljud.se, klock.android@gmail.com, nenggun.kim@samsung.com, j.anaszewski@samsung.com, geliangtang@163.com, linux-kernel@vger.kernel.org, linux-media@vger.kernel.org, linux-api@vger.kernel.org, alsa-devel@alsa-project.org Subject: [PATCH v2 22/22] media: Ensure media device unregister is done only once Date: Wed, 3 Feb 2016 21:03:54 -0700 Message-Id: <9c22d4395f92102051383110cae9de09494d7257.1454557589.git.shuahkh@osg.samsung.com> X-Mailer: git-send-email 2.5.0 In-Reply-To: References: In-Reply-To: References: Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org media_device_unregister() checks if the media device is registered or not as the first step. However, the MEDIA_FLAG_REGISTERED bit doesn't get cleared until the end leaving a large window for two drivers to attempt media device unregister. The above leads to general protection faults when device is removed. Fix the problem with two phase media device unregister. Add a new interface media_devnode_start_unregister() to clear the MEDIA_FLAG_REGISTERED bit. Change media_device_unregister() call this interface to mark the start of unregister. This will ensure that media device unregister is done only once. Signed-off-by: Shuah Khan --- drivers/media/media-device.c | 12 ++++++------ drivers/media/media-devnode.c | 15 ++++++++++----- include/media/media-devnode.h | 17 +++++++++++++++++ 3 files changed, 33 insertions(+), 11 deletions(-) diff --git a/drivers/media/media-device.c b/drivers/media/media-device.c index 1f5d67e..584d46e 100644 --- a/drivers/media/media-device.c +++ b/drivers/media/media-device.c @@ -747,17 +747,17 @@ void media_device_unregister(struct media_device *mdev) struct media_entity *next; struct media_interface *intf, *tmp_intf; struct media_entity_notify *notify, *nextp; + int ret; if (mdev == NULL) return; - spin_lock(&mdev->lock); - - /* Check if mdev was ever registered at all */ - if (!media_devnode_is_registered(&mdev->devnode)) { - spin_unlock(&mdev->lock); + /* Start unregister - continue if necessary */ + ret = media_devnode_start_unregister(&mdev->devnode); + if (ret) return; - } + + spin_lock(&mdev->lock); /* Remove all entities from the media device */ list_for_each_entry_safe(entity, next, &mdev->entities, graph_obj.list) diff --git a/drivers/media/media-devnode.c b/drivers/media/media-devnode.c index 29409f4..c27f9e7 100644 --- a/drivers/media/media-devnode.c +++ b/drivers/media/media-devnode.c @@ -272,15 +272,20 @@ error: return ret; } -void media_devnode_unregister(struct media_devnode *mdev) +int __must_check media_devnode_start_unregister(struct media_devnode *mdev) { - /* Check if mdev was ever registered at all */ - if (!media_devnode_is_registered(mdev)) - return; - mutex_lock(&media_devnode_lock); + if (!media_devnode_is_registered(mdev)) { + mutex_unlock(&media_devnode_lock); + return -EINVAL; + } clear_bit(MEDIA_FLAG_REGISTERED, &mdev->flags); mutex_unlock(&media_devnode_lock); + return 0; +} + +void media_devnode_unregister(struct media_devnode *mdev) +{ device_unregister(&mdev->dev); } diff --git a/include/media/media-devnode.h b/include/media/media-devnode.h index fe42f08..6f08677 100644 --- a/include/media/media-devnode.h +++ b/include/media/media-devnode.h @@ -120,6 +120,23 @@ int __must_check media_devnode_register(struct media_devnode *mdev, struct module *owner); /** + * media_devnode_start_unregister - start unregister on a media device node + * @mdev: the device node to start unregister + * + * This clears the MEDIA_FLAG_REGISTERED bit to indicate that unregister + * is in progress. + * + * This function can safely be called if the device node has never been + * registered or has already been unregistered. + * + * Zero is returned on success. + * + * -EINVAL is returned if the device node has never been + * registered or has already been unregistered. + */ +int __must_check media_devnode_start_unregister(struct media_devnode *mdev); + +/** * media_devnode_unregister - unregister a media device node * @mdev: the device node to unregister * -- 2.5.0 From mboxrd@z Thu Jan 1 00:00:00 1970 From: Shuah Khan Subject: [PATCH v2 22/22] media: Ensure media device unregister is done only once Date: Wed, 3 Feb 2016 21:03:54 -0700 Message-ID: <9c22d4395f92102051383110cae9de09494d7257.1454557589.git.shuahkh@osg.samsung.com> References: Return-path: In-Reply-To: In-Reply-To: References: Sender: linux-kernel-owner@vger.kernel.org To: mchehab@osg.samsung.com, tiwai@suse.com, clemens@ladisch.de, hans.verkuil@cisco.com, laurent.pinchart@ideasonboard.com, sakari.ailus@linux.intel.com, javier@osg.samsung.com Cc: Shuah Khan , pawel@osciak.com, m.szyprowski@samsung.com, kyungmin.park@samsung.com, perex@perex.cz, arnd@arndb.de, dan.carpenter@oracle.com, tvboxspy@gmail.com, crope@iki.fi, ruchandani.tina@gmail.com, corbet@lwn.net, chehabrafael@gmail.com, k.kozlowski@samsung.com, stefanr@s5r6.in-berlin.de, inki.dae@samsung.com, jh1009.sung@samsung.com, elfring@users.sourceforge.net, prabhakar.csengg@gmail.com, sw0312.kim@samsung.com, p.zabel@pengutronix.de, ricardo.ribalda@gmail.com, labbott@fedoraproject.org, pierre-louis.bossart@linux.intel.com, ricard.wanderlof@axis.com, julian@jusst.de, takamichiho@gmail.com, dominic.sacre@gmx.de, misterpib@gmail.com, daniel@zonque.org, gtmkramer@xs4all.nl, normalperson@yhbt.net, joe@oampo.co.uk, linuxbugs@vittgam.net, johan@oljud.se, klock.android@gmail.com, nenggun.kim@samsung.com, j.anaszewski@samsung.com, geliangtang List-Id: linux-api@vger.kernel.org media_device_unregister() checks if the media device is registered or not as the first step. However, the MEDIA_FLAG_REGISTERED bit doesn't get cleared until the end leaving a large window for two drivers to attempt media device unregister. The above leads to general protection faults when device is removed. Fix the problem with two phase media device unregister. Add a new interface media_devnode_start_unregister() to clear the MEDIA_FLAG_REGISTERED bit. Change media_device_unregister() call this interface to mark the start of unregister. This will ensure that media device unregister is done only once. Signed-off-by: Shuah Khan --- drivers/media/media-device.c | 12 ++++++------ drivers/media/media-devnode.c | 15 ++++++++++----- include/media/media-devnode.h | 17 +++++++++++++++++ 3 files changed, 33 insertions(+), 11 deletions(-) diff --git a/drivers/media/media-device.c b/drivers/media/media-device.c index 1f5d67e..584d46e 100644 --- a/drivers/media/media-device.c +++ b/drivers/media/media-device.c @@ -747,17 +747,17 @@ void media_device_unregister(struct media_device *mdev) struct media_entity *next; struct media_interface *intf, *tmp_intf; struct media_entity_notify *notify, *nextp; + int ret; if (mdev == NULL) return; - spin_lock(&mdev->lock); - - /* Check if mdev was ever registered at all */ - if (!media_devnode_is_registered(&mdev->devnode)) { - spin_unlock(&mdev->lock); + /* Start unregister - continue if necessary */ + ret = media_devnode_start_unregister(&mdev->devnode); + if (ret) return; - } + + spin_lock(&mdev->lock); /* Remove all entities from the media device */ list_for_each_entry_safe(entity, next, &mdev->entities, graph_obj.list) diff --git a/drivers/media/media-devnode.c b/drivers/media/media-devnode.c index 29409f4..c27f9e7 100644 --- a/drivers/media/media-devnode.c +++ b/drivers/media/media-devnode.c @@ -272,15 +272,20 @@ error: return ret; } -void media_devnode_unregister(struct media_devnode *mdev) +int __must_check media_devnode_start_unregister(struct media_devnode *mdev) { - /* Check if mdev was ever registered at all */ - if (!media_devnode_is_registered(mdev)) - return; - mutex_lock(&media_devnode_lock); + if (!media_devnode_is_registered(mdev)) { + mutex_unlock(&media_devnode_lock); + return -EINVAL; + } clear_bit(MEDIA_FLAG_REGISTERED, &mdev->flags); mutex_unlock(&media_devnode_lock); + return 0; +} + +void media_devnode_unregister(struct media_devnode *mdev) +{ device_unregister(&mdev->dev); } diff --git a/include/media/media-devnode.h b/include/media/media-devnode.h index fe42f08..6f08677 100644 --- a/include/media/media-devnode.h +++ b/include/media/media-devnode.h @@ -120,6 +120,23 @@ int __must_check media_devnode_register(struct media_devnode *mdev, struct module *owner); /** + * media_devnode_start_unregister - start unregister on a media device node + * @mdev: the device node to start unregister + * + * This clears the MEDIA_FLAG_REGISTERED bit to indicate that unregister + * is in progress. + * + * This function can safely be called if the device node has never been + * registered or has already been unregistered. + * + * Zero is returned on success. + * + * -EINVAL is returned if the device node has never been + * registered or has already been unregistered. + */ +int __must_check media_devnode_start_unregister(struct media_devnode *mdev); + +/** * media_devnode_unregister - unregister a media device node * @mdev: the device node to unregister * -- 2.5.0