Brian Norris <briannorris@xxxxxxxxxxxx> writes: >> --- a/drivers/net/wireless/marvell/mwifiex/pcie.c >> +++ b/drivers/net/wireless/marvell/mwifiex/pcie.c >> @@ -310,6 +310,8 @@ static void mwifiex_pcie_remove(struct pci_dev *pdev) >> mwifiex_init_shutdown_fw(priv, MWIFIEX_FUNC_SHUTDOWN); >> } >> >> + cancel_work_sync(&card->work); >> + > > Just FYI, this "fix" is not a real fix. It will likely paper over some > of your bugs (where, e.g., the FW shutdown command times out in the > previous couple of lines), but this highlights the fact that there are > other races that could trigger the same behavior. You're not fixing > those. > > For example, what if somebody initiates a scan or other nl80211 command > between the above line and mwifiex_remove_card()? That command could > potentially time out too. > > The proper fix would be to institute some kind of mutual exclusion > (locking) between mwifiex_shutdown_sw() and mwifiex_remove_card(), so > that they can't occur at the same time. > > Unfortunately, I only paid attention to this after Kalle already applied > this patch. Personally, I'd prefer this patch not get applied, since > it's a bad solution to an obvious problem, which instead leaves a subtle > problem that perhaps no one will bother fixing. I can revert it, that's not a problem. Can I use the text below as explanation for the revert? ---------------------------------------------------------------------- Brian Norris <briannorris@xxxxxxxxxxxx> says: Just FYI, this "fix" is not a real fix. It will likely paper over some of your bugs (where, e.g., the FW shutdown command times out in the previous couple of lines), but this highlights the fact that there are other races that could trigger the same behavior. You're not fixing those. For example, what if somebody initiates a scan or other nl80211 command between the above line and mwifiex_remove_card()? That command could potentially time out too. The proper fix would be to institute some kind of mutual exclusion (locking) between mwifiex_shutdown_sw() and mwifiex_remove_card(), so that they can't occur at the same time. ---------------------------------------------------------------------- -- Kalle Valo
