• Jason Gunthorpe's avatar
    vfio/fsl-mc: Re-order vfio_fsl_mc_probe() · 2b1fe162
    Jason Gunthorpe authored
    vfio_add_group_dev() must be called only after all of the private data in
    vdev is fully setup and ready, otherwise there could be races with user
    space instantiating a device file descriptor and starting to call ops.
    
    For instance vfio_fsl_mc_reflck_attach() sets vdev->reflck and
    vfio_fsl_mc_open(), called by fops open, unconditionally derefs it, which
    will crash if things get out of order.
    
    This driver started life with the right sequence, but two commits added
    stuff after vfio_add_group_dev().
    
    Fixes: 2e0d2956 ("vfio/fsl-mc: Add irq infrastructure for fsl-mc devices")
    Fixes: f2ba7e8c ("vfio/fsl-mc: Added lock support in preparation for interrupt handling")
    Co-developed-by: default avatarDiana Craciun OSS <diana.craciun@oss.nxp.com>
    Signed-off-by: default avatarJason Gunthorpe <jgg@nvidia.com>
    Message-Id: <5-v3-225de1400dfc+4e074-vfio1_jgg@nvidia.com>
    Signed-off-by: default avatarAlex Williamson <alex.williamson@redhat.com>
    2b1fe162
vfio_fsl_mc.c 16.8 KB