linux/drivers/net/wireless/marvell
Brian Norris 5caa7f3846 mwifiex: fix kernel crash after shutdown command timeout
We observed a SHUTDOWN command timeout during reboot stress test due to
a corner case firmware bug. It can lead to either a use-after-free +
OOPS (on either the adapter structure, or the 'card' structure) or an
abort (where, e.g., the PCI device is "disabled" before we're done
dumping the FW).

We can avoid this by canceling/flushing the FW dump work:

(a) after we've terminated all other work queues (e.g., for processing
    commands which could time out)
(b) after we've disabled all interrupts (which could also queue more
    work for us)
(c) after we've unregistered the netdev and wiphy structures (and
    implicitly, and debugfs entries which could manually trigger FW dumps)
(d) before we've actually disabled the device (e.g.,
    pci_device_disable())

Altogether, this means no card->work will be scheduled if we sync at
a point that satisfies the above. This can be done at the beginning of
the .cleanup_if() callback.

Signed-off-by: Brian Norris <briannorris@chromium.org>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
2017-03-20 19:09:20 +02:00
..
libertas libertas: fix improper return value 2017-01-19 14:38:43 +02:00
libertas_tf net: wireless: marvell: libertas_tf: if_usb: don't print error when allocating urb fails 2016-08-13 14:53:41 -07:00
mwifiex mwifiex: fix kernel crash after shutdown command timeout 2017-03-20 19:09:20 +02:00
Kconfig
Makefile
mwl8k.c cfg80211: remove enum ieee80211_band 2016-04-12 15:56:15 +02:00