USB: last abuses of intfdata in close for usb-serial drivers

these drivers abused intfdata in close() as flags for binding.
That races with reprobing of those devices. This patch fixes that by using
the flag and the locks introduced with the patch against mos7720.

Signed-off-by: Oliver Neukum <oneukum@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
Oliver Neukum 2008-01-23 12:28:45 +01:00 committed by Greg Kroah-Hartman
parent 3edbc98650
commit 0915f490d8
4 changed files with 19 additions and 15 deletions

View File

@ -1405,19 +1405,19 @@ static void digi_close(struct usb_serial_port *port, struct file *filp)
unsigned char buf[32]; unsigned char buf[32];
struct tty_struct *tty = port->tty; struct tty_struct *tty = port->tty;
struct digi_port *priv = usb_get_serial_port_data(port); struct digi_port *priv = usb_get_serial_port_data(port);
unsigned long flags = 0;
dbg("digi_close: TOP: port=%d, open_count=%d", dbg("digi_close: TOP: port=%d, open_count=%d",
priv->dp_port_num, port->open_count); priv->dp_port_num, port->open_count);
mutex_lock(&port->serial->disc_mutex);
/* if disconnected, just clear flags */ /* if disconnected, just clear flags */
if (!usb_get_intfdata(port->serial->interface)) if (port->serial->disconnected)
goto exit; goto exit;
/* do cleanup only after final close on this port */ /* do cleanup only after final close on this port */
spin_lock_irqsave(&priv->dp_port_lock, flags); spin_lock_irq(&priv->dp_port_lock);
priv->dp_in_close = 1; priv->dp_in_close = 1;
spin_unlock_irqrestore(&priv->dp_port_lock, flags); spin_unlock_irq(&priv->dp_port_lock);
/* tell line discipline to process only XON/XOFF */ /* tell line discipline to process only XON/XOFF */
tty->closing = 1; tty->closing = 1;
@ -1482,11 +1482,12 @@ static void digi_close(struct usb_serial_port *port, struct file *filp)
} }
tty->closing = 0; tty->closing = 0;
exit: exit:
spin_lock_irqsave(&priv->dp_port_lock, flags); spin_lock_irq(&priv->dp_port_lock);
priv->dp_write_urb_in_use = 0; priv->dp_write_urb_in_use = 0;
priv->dp_in_close = 0; priv->dp_in_close = 0;
wake_up_interruptible(&priv->dp_close_wait); wake_up_interruptible(&priv->dp_close_wait);
spin_unlock_irqrestore(&priv->dp_port_lock, flags); spin_unlock_irq(&priv->dp_port_lock);
mutex_unlock(&port->serial->disc_mutex);
dbg("digi_close: done"); dbg("digi_close: done");
} }

View File

@ -649,7 +649,7 @@ static void oti6858_close(struct usb_serial_port *port, struct file *filp)
set_current_state(TASK_INTERRUPTIBLE); set_current_state(TASK_INTERRUPTIBLE);
if (oti6858_buf_data_avail(priv->buf) == 0 if (oti6858_buf_data_avail(priv->buf) == 0
|| timeout == 0 || signal_pending(current) || timeout == 0 || signal_pending(current)
|| !usb_get_intfdata(port->serial->interface)) /* disconnect */ || port->serial->disconnected)
break; break;
spin_unlock_irqrestore(&priv->lock, flags); spin_unlock_irqrestore(&priv->lock, flags);
timeout = schedule_timeout(timeout); timeout = schedule_timeout(timeout);

View File

@ -667,7 +667,7 @@ static void pl2303_close(struct usb_serial_port *port, struct file *filp)
set_current_state(TASK_INTERRUPTIBLE); set_current_state(TASK_INTERRUPTIBLE);
if (pl2303_buf_data_avail(priv->buf) == 0 || if (pl2303_buf_data_avail(priv->buf) == 0 ||
timeout == 0 || signal_pending(current) || timeout == 0 || signal_pending(current) ||
!usb_get_intfdata(port->serial->interface)) /* disconnect */ port->serial->disconnected)
break; break;
spin_unlock_irqrestore(&priv->lock, flags); spin_unlock_irqrestore(&priv->lock, flags);
timeout = schedule_timeout(timeout); timeout = schedule_timeout(timeout);

View File

@ -1493,11 +1493,10 @@ static void ti_drain(struct ti_port *tport, unsigned long timeout, int flush)
struct ti_device *tdev = tport->tp_tdev; struct ti_device *tdev = tport->tp_tdev;
struct usb_serial_port *port = tport->tp_port; struct usb_serial_port *port = tport->tp_port;
wait_queue_t wait; wait_queue_t wait;
unsigned long flags;
dbg("%s - port %d", __FUNCTION__, port->number); dbg("%s - port %d", __FUNCTION__, port->number);
spin_lock_irqsave(&tport->tp_lock, flags); spin_lock_irq(&tport->tp_lock);
/* wait for data to drain from the buffer */ /* wait for data to drain from the buffer */
tdev->td_urb_error = 0; tdev->td_urb_error = 0;
@ -1508,11 +1507,11 @@ static void ti_drain(struct ti_port *tport, unsigned long timeout, int flush)
if (ti_buf_data_avail(tport->tp_write_buf) == 0 if (ti_buf_data_avail(tport->tp_write_buf) == 0
|| timeout == 0 || signal_pending(current) || timeout == 0 || signal_pending(current)
|| tdev->td_urb_error || tdev->td_urb_error
|| !usb_get_intfdata(port->serial->interface)) /* disconnect */ || port->serial->disconnected) /* disconnect */
break; break;
spin_unlock_irqrestore(&tport->tp_lock, flags); spin_unlock_irq(&tport->tp_lock);
timeout = schedule_timeout(timeout); timeout = schedule_timeout(timeout);
spin_lock_irqsave(&tport->tp_lock, flags); spin_lock_irq(&tport->tp_lock);
} }
set_current_state(TASK_RUNNING); set_current_state(TASK_RUNNING);
remove_wait_queue(&tport->tp_write_wait, &wait); remove_wait_queue(&tport->tp_write_wait, &wait);
@ -1521,19 +1520,23 @@ static void ti_drain(struct ti_port *tport, unsigned long timeout, int flush)
if (flush) if (flush)
ti_buf_clear(tport->tp_write_buf); ti_buf_clear(tport->tp_write_buf);
spin_unlock_irqrestore(&tport->tp_lock, flags); spin_unlock_irq(&tport->tp_lock);
mutex_lock(&port->serial->disc_mutex);
/* wait for data to drain from the device */ /* wait for data to drain from the device */
/* wait for empty tx register, plus 20 ms */ /* wait for empty tx register, plus 20 ms */
timeout += jiffies; timeout += jiffies;
tport->tp_lsr &= ~TI_LSR_TX_EMPTY; tport->tp_lsr &= ~TI_LSR_TX_EMPTY;
while ((long)(jiffies - timeout) < 0 && !signal_pending(current) while ((long)(jiffies - timeout) < 0 && !signal_pending(current)
&& !(tport->tp_lsr&TI_LSR_TX_EMPTY) && !tdev->td_urb_error && !(tport->tp_lsr&TI_LSR_TX_EMPTY) && !tdev->td_urb_error
&& usb_get_intfdata(port->serial->interface)) { /* not disconnected */ && !port->serial->disconnected) {
if (ti_get_lsr(tport)) if (ti_get_lsr(tport))
break; break;
mutex_unlock(&port->serial->disc_mutex);
msleep_interruptible(20); msleep_interruptible(20);
mutex_lock(&port->serial->disc_mutex);
} }
mutex_unlock(&port->serial->disc_mutex);
} }