[PATCH net v3 2/7] net: fec: release IRQs before dependent resources
flat view
COLD19d
From: Jiale Yao <hidden>
Date: 2026-10-03 09:01:15
Also in:
imx, lkml, stable
Subsystem:
freescale imx / mxc fec driver, networking drivers, the rest · Maintainers:
Wei Fang, Andrew Lunn, "David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Linus Torvalds
Revision v3 of 3 in this series.
Revisions (3)
- v1 [diff vs current]
- v2 [diff vs current]
- v3 current
fec_drv_remove() leaves the managed IRQs active until after the remove
callback returns. The handler can then run after the device has been
unregistered, its clocks have been disabled, and its other resources have
been torn down.
Mask the hardware interrupt sources and disable each IRQ before
unregistering the netdev. Mask the sources again afterwards because
fec_stop() restores the default interrupt mask. Also perform the same
cleanup on probe failures, and manage the netdev with devres so it remains
alive until the IRQ resources are released.
This issue was found by a static analysis method used in our research.
Fixes: 0d9b2ab1c376 ("fec: Use devm_request_irq()")
Cc: stable@vger.kernel.org
Signed-off-by: Jiale Yao <redacted>
---
drivers/net/ethernet/freescale/fec_main.c | 28 ++++++++++++++---------
1 file changed, 17 insertions(+), 11 deletions(-)
diff --git a/drivers/net/ethernet/freescale/fec_main.c b/drivers/net/ethernet/freescale/fec_main.c
index 794ec427b0ee..b0fc5b39c748 100644
--- a/drivers/net/ethernet/freescale/fec_main.c
+++ b/drivers/net/ethernet/freescale/fec_main.c@@ -5219,8 +5219,9 @@ fec_probe(struct platform_device *pdev) fec_enet_get_queue_num(pdev, &num_tx_qs, &num_rx_qs); /* Init network device */ - ndev = alloc_etherdev_mqs(sizeof(struct fec_enet_private) + - FEC_STATS_SIZE, num_tx_qs, num_rx_qs); + ndev = devm_alloc_etherdev_mqs(&pdev->dev, + sizeof(struct fec_enet_private) + + FEC_STATS_SIZE, num_tx_qs, num_rx_qs); if (!ndev) return -ENOMEM;
@@ -5247,10 +5248,8 @@ fec_probe(struct platform_device *pdev) pinctrl_pm_select_default_state(&pdev->dev); fep->hwp = devm_platform_ioremap_resource(pdev, 0); - if (IS_ERR(fep->hwp)) { - ret = PTR_ERR(fep->hwp); - goto failed_ioremap; - } + if (IS_ERR(fep->hwp)) + return PTR_ERR(fep->hwp); fep->pdev = pdev; fep->dev_id = dev_id++;
@@ -5455,6 +5454,9 @@ fec_probe(struct platform_device *pdev) fec_enet_mii_remove(fep); failed_mii_init: failed_irq: + fec_irqs_disable(ndev); + while (i--) + disable_irq(fep->irq[i]); fec_enet_deinit(ndev); failed_init: if (fep->bufdesc_ex)
@@ -5479,9 +5481,6 @@ fec_probe(struct platform_device *pdev) failed_ipc_init: failed_phy: dev_id--; -failed_ioremap: - free_netdev(ndev); - return ret; }
@@ -5491,7 +5490,7 @@ fec_drv_remove(struct platform_device *pdev) struct net_device *ndev = platform_get_drvdata(pdev); struct fec_enet_private *fep = netdev_priv(ndev); struct device_node *np = pdev->dev.of_node; - int ret; + int i, irq_cnt, ret; ret = pm_runtime_get_sync(&pdev->dev); if (ret < 0)
@@ -5502,7 +5501,15 @@ fec_drv_remove(struct platform_device *pdev) cancel_work_sync(&fep->tx_timeout_work); if (fep->bufdesc_ex) fec_ptp_stop(pdev); + if (ret >= 0) + fec_irqs_disable(ndev); + irq_cnt = fec_enet_get_irq_cnt(pdev); + for (i = 0; i < irq_cnt; i++) + disable_irq(fep->irq[i]); unregister_netdev(ndev); + /* fec_stop() enables the default interrupt mask. */ + if (ret >= 0) + fec_irqs_disable(ndev); fec_enet_mii_remove(fep); if (fep->reg_phy) regulator_disable(fep->reg_phy);
@@ -5522,7 +5529,6 @@ fec_drv_remove(struct platform_device *pdev) pm_runtime_disable(&pdev->dev); fec_enet_deinit(ndev); - free_netdev(ndev); } static int fec_suspend(struct device *dev)
--
2.34.1