workqueue: fix bugs in wq_update_unbound_numa() failure path
PATCH 1/2 workqueue: fix bugs in wq_update_unbound_numa() failure path
wq_update_unbound_numa() failure path has the following two bugs.
- alloc_unbound_pwq() is called without holding wq->mutex; however, if the allocation fails, it jumps to out_unlock which tries to unlock wq->mutex.
- The function should switch to dfl_pwq on failure but didn't do so after alloc_unbound_pwq() failure.
Fix it by regrabbing wq->mutex and jumping to use_dfl_pwq on alloc_unbound_pwq() failure.
--- kernel/workqueue.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)
kernel/workqueue.c +2 -1
@@ -4100,7 +4100,8 @@ static void wq_update_unbound_numa(struct workqueue_struct *wq, int cpu,if (!pwq) {pr_warning ("workqueue: allocation failed while updating NUMA affinity of \"%s\"\n" , wq->name); - goto out_unlock; +mutex_lock (&wq->mutex); + goto use_dfl_pwq; }/*
Signature · 1 line
1.7.4.4
Acked.
Quoted 40 lines · Daeseok Youn
wq_update_unbound_numa()failure path has the following two bugs.
-alloc_unbound_pwq()is called without holdingwq->mutex; however, if the allocation fails, it jumps toout_unlockwhich tries to unlockwq->mutex.- The function should switch to
dfl_pwqon failure but didn't do so afteralloc_unbound_pwq()failure.Fix it by regrabbing
wq->mutexand jumping touse_dfl_pwqonalloc_unbound_pwq()failure.Signed-off-by Daeseok Youn <[email protected]>--- kernel/workqueue.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)kernel/workqueue.c +2
-2@@ -4100,7 +4100,8 @@ static void wq_update_unbound_numa(struct workqueue_struct *wq, int cpu,if (!pwq) {pr_warning ("workqueue: allocation failed while updating NUMA affinity of \"%s\"\n" , wq->name); - goto out_unlock; +mutex_lock (&wq->mutex); + goto use_dfl_pwq; }/* -- 1.7.4.4
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Quoted 6 lines · Daeseok Youn
wq_update_unbound_numa()failure path has the following two bugs.
-alloc_unbound_pwq()is called without holdingwq->mutex; however, if the allocation fails, it jumps toout_unlockwhich tries to unlockwq->mutex.
Quoted 7 lines
- The function should switch to
dfl_pwqon failure but didn't do so afteralloc_unbound_pwq()failure.Fix it by regrabbing
wq->mutexand jumping touse_dfl_pwqonalloc_unbound_pwq()failure.Signed-off-by Daeseok Youn <[email protected]>
Applied to wq/for-3.15-fixes.
Thanks.
Signature · 1 line
tejun