Skip to content

Commit b02bb79

Browse files
Ychamecminyard
authored andcommitted
ipmi: fix potential deadlock on &kcs_bmc->lock
As kcs_bmc_handle_event() is executed inside both a timer and a hardirq, it should disable irq before lock acquisition otherwise deadlock could happen if the timmer is preemtped by the irq. Possible deadlock scenario: aspeed_kcs_check_obe() (timer) -> kcs_bmc_handle_event() -> spin_lock(&kcs_bmc->lock) <irq interruption> -> aspeed_kcs_irq() -> kcs_bmc_handle_event() -> spin_lock(&kcs_bmc->lock) (deadlock here) This flaw was found using an experimental static analysis tool we are developing for irq-related deadlock. The tentative patch fix the potential deadlock by spin_lock_irqsave() Signed-off-by: Chengfeng Ye <dg573847474@gmail.com> Message-Id: <20230627152449.36093-1-dg573847474@gmail.com> Signed-off-by: Corey Minyard <minyard@acm.org>
1 parent 6cf1a12 commit b02bb79

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

drivers/char/ipmi/kcs_bmc.c

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,12 +56,13 @@ irqreturn_t kcs_bmc_handle_event(struct kcs_bmc_device *kcs_bmc)
5656
{
5757
struct kcs_bmc_client *client;
5858
irqreturn_t rc = IRQ_NONE;
59+
unsigned long flags;
5960

60-
spin_lock(&kcs_bmc->lock);
61+
spin_lock_irqsave(&kcs_bmc->lock, flags);
6162
client = kcs_bmc->client;
6263
if (client)
6364
rc = client->ops->event(client);
64-
spin_unlock(&kcs_bmc->lock);
65+
spin_unlock_irqrestore(&kcs_bmc->lock, flags);
6566

6667
return rc;
6768
}

0 commit comments

Comments
 (0)