firewire: ohci: prevent iso completion callbacks after context stop
authorClemens Ladisch <clemens@ladisch.de>
Wed, 16 Feb 2011 09:32:11 +0000 (10:32 +0100)
committerStefan Richter <stefanr@s5r6.in-berlin.de>
Sat, 26 Feb 2011 14:11:03 +0000 (15:11 +0100)
commite81cbebdfc384f9c2ae91225f16ef994118e5e2c
tree7bdb493f5bbb2d175966a8bd5336145c9e871ac3
parent5aaffc65a27dd9db65455c2c9ab3ede57238d2f5
firewire: ohci: prevent iso completion callbacks after context stop

To prevent the iso packet callback from being called after
fw_iso_context_stop() has returned, make sure that the
context's tasklet has finished executing before that.

This fixes access-after-free bugs that have so far been
observed only in the upcoming snd-firewire-speakers driver,
but can theoretically also happen in the firedtv driver.

Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
drivers/firewire/ohci.c