From: ALOK TIWARI <alok.a.tiwari@oracle.com>
To: David Carlier <devnexen@gmail.com>,
anthony.l.nguyen@intel.com, przemyslaw.kitszel@intel.com
Cc: andrew+netdev@lunn.ch, davem@davemloft.net, edumazet@google.com,
kuba@kernel.org, pabeni@redhat.com, horms@kernel.org,
intel-wired-lan@lists.osuosl.org, netdev@vger.kernel.org,
linux-kernel@vger.kernel.org, stable@vger.kernel.org
Subject: Re: [PATCH net] idpf: handle NULL adev in idpf_idc_vdev_mtu_event
Date: Wed, 13 May 2026 23:46:43 +0530 [thread overview]
Message-ID: <f0ab92b1-ee9a-433e-87f0-70b809789c16@oracle.com> (raw)
In-Reply-To: <20260509233722.111895-1-devnexen@gmail.com>
On 5/10/2026 5:07 AM, David Carlier wrote:
> idpf_idc_vport_dev_ctrl(adapter, false) sets vport->vdev_info->adev
> to NULL but keeps vport->vdev_info itself. An MTU change after that
> calls idpf_idc_vdev_mtu_event(), which derefs vdev_info->adev for
> device_lock() before reaching the (!adev || ...) check.
>
> NULL-check vdev_info->adev before locking.
>
> Fixes: ed6e1c8796a4 ("idpf: implement IDC vport aux driver MTU change handler")
> Cc:stable@vger.kernel.org
> Signed-off-by: David Carlier<devnexen@gmail.com>
> ---
> drivers/net/ethernet/intel/idpf/idpf_idc.c | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/net/ethernet/intel/idpf/idpf_idc.c b/drivers/net/ethernet/intel/idpf/idpf_idc.c
> index b7d6b08fc89e..3ba52a80d52f 100644
> --- a/drivers/net/ethernet/intel/idpf/idpf_idc.c
> +++ b/drivers/net/ethernet/intel/idpf/idpf_idc.c
> @@ -162,9 +162,12 @@ void idpf_idc_vdev_mtu_event(struct iidc_rdma_vport_dev_info *vdev_info,
>
> set_bit(event_type, event.type);
>
> + if (!vdev_info->adev)
> + return;
> +
> device_lock(&vdev_info->adev->dev);
> adev = vdev_info->adev;
> - if (!adev || !adev->dev.driver)
> + if (!adev->dev.driver)
> goto unlock;
> iadrv = container_of(adev->dev.driver,
> struct iidc_rdma_vport_auxiliary_drv,
> --
It still reads vdev_info->adev twice.
better to cache it locally and use
adev = READ_ONCE(vdev_info->adev);
if (!adev)
return;
device_lock(&adev->dev);
if (!adev->dev.driver)
goto unlock;
Thanks,
Alok
WARNING: multiple messages have this Message-ID (diff)
From: ALOK TIWARI via Intel-wired-lan <intel-wired-lan@osuosl.org>
To: David Carlier <devnexen@gmail.com>,
anthony.l.nguyen@intel.com, przemyslaw.kitszel@intel.com
Cc: andrew+netdev@lunn.ch, davem@davemloft.net, edumazet@google.com,
kuba@kernel.org, pabeni@redhat.com, horms@kernel.org,
intel-wired-lan@lists.osuosl.org, netdev@vger.kernel.org,
linux-kernel@vger.kernel.org, stable@vger.kernel.org
Subject: Re: [Intel-wired-lan] [PATCH net] idpf: handle NULL adev in idpf_idc_vdev_mtu_event
Date: Wed, 13 May 2026 23:46:43 +0530 [thread overview]
Message-ID: <f0ab92b1-ee9a-433e-87f0-70b809789c16@oracle.com> (raw)
In-Reply-To: <20260509233722.111895-1-devnexen@gmail.com>
On 5/10/2026 5:07 AM, David Carlier wrote:
> idpf_idc_vport_dev_ctrl(adapter, false) sets vport->vdev_info->adev
> to NULL but keeps vport->vdev_info itself. An MTU change after that
> calls idpf_idc_vdev_mtu_event(), which derefs vdev_info->adev for
> device_lock() before reaching the (!adev || ...) check.
>
> NULL-check vdev_info->adev before locking.
>
> Fixes: ed6e1c8796a4 ("idpf: implement IDC vport aux driver MTU change handler")
> Cc:stable@vger.kernel.org
> Signed-off-by: David Carlier<devnexen@gmail.com>
> ---
> drivers/net/ethernet/intel/idpf/idpf_idc.c | 5 ++++-
> 1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/net/ethernet/intel/idpf/idpf_idc.c b/drivers/net/ethernet/intel/idpf/idpf_idc.c
> index b7d6b08fc89e..3ba52a80d52f 100644
> --- a/drivers/net/ethernet/intel/idpf/idpf_idc.c
> +++ b/drivers/net/ethernet/intel/idpf/idpf_idc.c
> @@ -162,9 +162,12 @@ void idpf_idc_vdev_mtu_event(struct iidc_rdma_vport_dev_info *vdev_info,
>
> set_bit(event_type, event.type);
>
> + if (!vdev_info->adev)
> + return;
> +
> device_lock(&vdev_info->adev->dev);
> adev = vdev_info->adev;
> - if (!adev || !adev->dev.driver)
> + if (!adev->dev.driver)
> goto unlock;
> iadrv = container_of(adev->dev.driver,
> struct iidc_rdma_vport_auxiliary_drv,
> --
It still reads vdev_info->adev twice.
better to cache it locally and use
adev = READ_ONCE(vdev_info->adev);
if (!adev)
return;
device_lock(&adev->dev);
if (!adev->dev.driver)
goto unlock;
Thanks,
Alok
next prev parent reply other threads:[~2026-05-13 18:17 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-05-09 23:37 [Intel-wired-lan] [PATCH net] idpf: handle NULL adev in idpf_idc_vdev_mtu_event David Carlier
2026-05-09 23:37 ` David Carlier
2026-05-13 18:16 ` ALOK TIWARI [this message]
2026-05-13 18:16 ` [Intel-wired-lan] " ALOK TIWARI via Intel-wired-lan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=f0ab92b1-ee9a-433e-87f0-70b809789c16@oracle.com \
--to=alok.a.tiwari@oracle.com \
--cc=andrew+netdev@lunn.ch \
--cc=anthony.l.nguyen@intel.com \
--cc=davem@davemloft.net \
--cc=devnexen@gmail.com \
--cc=edumazet@google.com \
--cc=horms@kernel.org \
--cc=intel-wired-lan@lists.osuosl.org \
--cc=kuba@kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=przemyslaw.kitszel@intel.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.