gpio: em: remove the gpiochip before removing the irq domain
In commit8764c4ca50
("gpio: em: use the managed version of gpiochip_add_data()") we implicitly altered the ordering of resource freeing: since gpiochip_remove() calls gpiochip_irqchip_remove() internally, we now can potentially use the irq_domain after it was destroyed in the remove() callback (as devm resources are freed after remove() has returned). Use devm_add_action_or_reset() to keep the ordering right and entirely kill the remove() callback in the driver. Reported-by: Geert Uytterhoeven <geert@linux-m68k.org> Fixes:8764c4ca50
("gpio: em: use the managed version of gpiochip_add_data()") Cc: stable@vger.kernel.org Signed-off-by: Bartosz Golaszewski <bgolaszewski@baylibre.com> Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be>
This commit is contained in:
parent
89fea04c85
commit
19ec11a223
|
@ -259,6 +259,13 @@ static const struct irq_domain_ops em_gio_irq_domain_ops = {
|
||||||
.xlate = irq_domain_xlate_twocell,
|
.xlate = irq_domain_xlate_twocell,
|
||||||
};
|
};
|
||||||
|
|
||||||
|
static void em_gio_irq_domain_remove(void *data)
|
||||||
|
{
|
||||||
|
struct irq_domain *domain = data;
|
||||||
|
|
||||||
|
irq_domain_remove(domain);
|
||||||
|
}
|
||||||
|
|
||||||
static int em_gio_probe(struct platform_device *pdev)
|
static int em_gio_probe(struct platform_device *pdev)
|
||||||
{
|
{
|
||||||
struct em_gio_priv *p;
|
struct em_gio_priv *p;
|
||||||
|
@ -333,39 +340,30 @@ static int em_gio_probe(struct platform_device *pdev)
|
||||||
return -ENXIO;
|
return -ENXIO;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
ret = devm_add_action_or_reset(&pdev->dev, em_gio_irq_domain_remove,
|
||||||
|
p->irq_domain);
|
||||||
|
if (ret)
|
||||||
|
return ret;
|
||||||
|
|
||||||
if (devm_request_irq(&pdev->dev, irq[0]->start,
|
if (devm_request_irq(&pdev->dev, irq[0]->start,
|
||||||
em_gio_irq_handler, 0, name, p)) {
|
em_gio_irq_handler, 0, name, p)) {
|
||||||
dev_err(&pdev->dev, "failed to request low IRQ\n");
|
dev_err(&pdev->dev, "failed to request low IRQ\n");
|
||||||
ret = -ENOENT;
|
return -ENOENT;
|
||||||
goto err1;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
if (devm_request_irq(&pdev->dev, irq[1]->start,
|
if (devm_request_irq(&pdev->dev, irq[1]->start,
|
||||||
em_gio_irq_handler, 0, name, p)) {
|
em_gio_irq_handler, 0, name, p)) {
|
||||||
dev_err(&pdev->dev, "failed to request high IRQ\n");
|
dev_err(&pdev->dev, "failed to request high IRQ\n");
|
||||||
ret = -ENOENT;
|
return -ENOENT;
|
||||||
goto err1;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
ret = devm_gpiochip_add_data(&pdev->dev, gpio_chip, p);
|
ret = devm_gpiochip_add_data(&pdev->dev, gpio_chip, p);
|
||||||
if (ret) {
|
if (ret) {
|
||||||
dev_err(&pdev->dev, "failed to add GPIO controller\n");
|
dev_err(&pdev->dev, "failed to add GPIO controller\n");
|
||||||
goto err1;
|
return ret;
|
||||||
}
|
}
|
||||||
|
|
||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
err1:
|
|
||||||
irq_domain_remove(p->irq_domain);
|
|
||||||
return ret;
|
|
||||||
}
|
|
||||||
|
|
||||||
static int em_gio_remove(struct platform_device *pdev)
|
|
||||||
{
|
|
||||||
struct em_gio_priv *p = platform_get_drvdata(pdev);
|
|
||||||
|
|
||||||
irq_domain_remove(p->irq_domain);
|
|
||||||
return 0;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
static const struct of_device_id em_gio_dt_ids[] = {
|
static const struct of_device_id em_gio_dt_ids[] = {
|
||||||
|
@ -376,7 +374,6 @@ MODULE_DEVICE_TABLE(of, em_gio_dt_ids);
|
||||||
|
|
||||||
static struct platform_driver em_gio_device_driver = {
|
static struct platform_driver em_gio_device_driver = {
|
||||||
.probe = em_gio_probe,
|
.probe = em_gio_probe,
|
||||||
.remove = em_gio_remove,
|
|
||||||
.driver = {
|
.driver = {
|
||||||
.name = "em_gio",
|
.name = "em_gio",
|
||||||
.of_match_table = em_gio_dt_ids,
|
.of_match_table = em_gio_dt_ids,
|
||||||
|
|
Loading…
Reference in New Issue