On 11/30/2013 11:47 PM, Carsten Emde wrote:
> Sebastian,
Hi Carsten,
>> index a06d983..d3add07 100644
>> --- a/drivers/acpi/ec.c
>> +++ b/drivers/acpi/ec.c
>> @@ -175,16 +175,19 @@ static void start_transaction(struct acpi_ec *ec)
>> static void advance_transaction(struct acpi_ec *ec, u8 status)
>> {
>> unsigned long flags;
>
>> - struct transaction *t = ec->curr;
>> + struct transaction *t;
>>
>> spin_lock_irqsave(&ec->lock, flags);
>> + t = ec->curr;
> Looks like a race - did you find a place where ec->curr->wdata could be
> overwritten? The small size of the potential race window may explain why
> it took a couple of days to trigger it.
The pointer is assigned under a lock but here it is dereferenced before
taking the lock. It looks racy this might be the bug.
> Will apply the fix and the warning - let's see.
>
> Thanks.
> -Carsten.
Sebastian
--
To unsubscribe from this list: send the line "unsubscribe linux-rt-users" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
