diff options
| author | Takashi Sakamoto <o-takashi@sakamocchi.jp> | 2026-01-28 07:34:13 +0900 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-02-06 16:57:37 +0100 |
| commit | b038874e31fc3caa0b0d5abd259dd54b918ad4a1 (patch) | |
| tree | ccc569dbc306fabf27769fb0b84769417f73d5d6 /include/net/aligned_data.h | |
| parent | a28fce0365e1cb9cb8c04c893b9334e5ca9d9f1c (diff) | |
firewire: core: fix race condition against transaction list
commit 20e01bba2ae4898ce65cdcacd1bd6bec5111abd9 upstream.
The list of transaction is enumerated without acquiring card lock when
processing AR response event. This causes a race condition bug when
processing AT request completion event concurrently.
This commit fixes the bug by put timer start for split transaction
expiration into the scope of lock. The value of jiffies in card structure
is referred before acquiring the lock.
Cc: stable@vger.kernel.org # v6.18
Fixes: b5725cfa4120 ("firewire: core: use spin lock specific to timer for split transaction")
Reported-by: Andreas Persson <andreasp56@outlook.com>
Closes: https://github.com/alsa-project/snd-firewire-ctl-services/issues/209
Tested-by: Andreas Persson <andreasp56@outlook.com>
Link: https://lore.kernel.org/r/20260127223413.22265-1-o-takashi@sakamocchi.jp
Signed-off-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'include/net/aligned_data.h')
0 files changed, 0 insertions, 0 deletions