diff options
| author | 2025-11-03 20:29:49 +0200 | |
|---|---|---|
| committer | 2025-11-10 16:08:21 -0500 | |
| commit | 98454bc812f3611551e4b1f81732da4aa7b9597e (patch) | |
| tree | 85ed3a940085b7167e0a0cb60aa8f10c2e7dce1a /lib/livepatch/git:/git.zx2c4.com/ssh:/git@git.zx2c4.com | |
| parent | Bluetooth: L2CAP: export l2cap_chan_hold for modules (diff) | |
| download | wireguard-linux-98454bc812f3611551e4b1f81732da4aa7b9597e.tar.xz wireguard-linux-98454bc812f3611551e4b1f81732da4aa7b9597e.zip | |
Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
disconnect_all_peers() calls sleeping function (l2cap_chan_close) under
spinlock. Holding the lock doesn't actually do any good -- we work on a
local copy of the list, and the lock doesn't protect against peer->chan
having already been freed.
Fix by taking refcounts of peer->chan instead. Clean up the code and
old comments a bit.
Take devices_lock instead of RCU, because the kfree_rcu();
l2cap_chan_put(); construct in chan_close_cb() does not guarantee
peer->chan is necessarily valid in RCU.
Also take l2cap_chan_lock() which is required for l2cap_chan_close().
Log: (bluez 6lowpan-tester Client Connect - Disable)
------
BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575
...
<TASK>
...
l2cap_send_disconn_req (net/bluetooth/l2cap_core.c:938 net/bluetooth/l2cap_core.c:1495)
...
? __pfx_l2cap_chan_close (net/bluetooth/l2cap_core.c:809)
do_enable_set (net/bluetooth/6lowpan.c:1048 net/bluetooth/6lowpan.c:1068)
------
Fixes: 90305829635d ("Bluetooth: 6lowpan: Converting rwlocks to use RCU")
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'lib/livepatch/git:/git.zx2c4.com/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions
