USB: usb-serial: replace shutdown with disconnect, release
This patch (as1254) splits up the shutdown method of usb_serial_driver into a disconnect and a release method. The problem is that the usb-serial core was calling shutdown during disconnect handling, but drivers didn't expect it to be called until after all the open file references had been closed. The result was an oops when the close method tried to use memory that had been deallocated by shutdown. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
c706ebdfc8
commit
f9c99bb8b3
@@ -58,7 +58,8 @@ static int debug;
|
||||
|
||||
/* Function prototypes */
|
||||
static int cyberjack_startup(struct usb_serial *serial);
|
||||
static void cyberjack_shutdown(struct usb_serial *serial);
|
||||
static void cyberjack_disconnect(struct usb_serial *serial);
|
||||
static void cyberjack_release(struct usb_serial *serial);
|
||||
static int cyberjack_open(struct tty_struct *tty,
|
||||
struct usb_serial_port *port, struct file *filp);
|
||||
static void cyberjack_close(struct usb_serial_port *port);
|
||||
@@ -94,7 +95,8 @@ static struct usb_serial_driver cyberjack_device = {
|
||||
.id_table = id_table,
|
||||
.num_ports = 1,
|
||||
.attach = cyberjack_startup,
|
||||
.shutdown = cyberjack_shutdown,
|
||||
.disconnect = cyberjack_disconnect,
|
||||
.release = cyberjack_release,
|
||||
.open = cyberjack_open,
|
||||
.close = cyberjack_close,
|
||||
.write = cyberjack_write,
|
||||
@@ -148,17 +150,25 @@ static int cyberjack_startup(struct usb_serial *serial)
|
||||
return 0;
|
||||
}
|
||||
|
||||
static void cyberjack_shutdown(struct usb_serial *serial)
|
||||
static void cyberjack_disconnect(struct usb_serial *serial)
|
||||
{
|
||||
int i;
|
||||
|
||||
dbg("%s", __func__);
|
||||
|
||||
for (i = 0; i < serial->num_ports; ++i)
|
||||
usb_kill_urb(serial->port[i]->interrupt_in_urb);
|
||||
}
|
||||
|
||||
static void cyberjack_release(struct usb_serial *serial)
|
||||
{
|
||||
int i;
|
||||
|
||||
dbg("%s", __func__);
|
||||
|
||||
for (i = 0; i < serial->num_ports; ++i) {
|
||||
usb_kill_urb(serial->port[i]->interrupt_in_urb);
|
||||
/* My special items, the standard routines free my urbs */
|
||||
kfree(usb_get_serial_port_data(serial->port[i]));
|
||||
usb_set_serial_port_data(serial->port[i], NULL);
|
||||
}
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user