public inbox for stable@vger.kernel.org
 help / color / mirror / Atom feed
From: Sasha Levin <sashal@kernel.org>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org
Cc: Marc Zyngier <maz@kernel.org>,
	Maulik Shah <quic_mkshah@quicinc.com>,
	Sasha Levin <sashal@kernel.org>,
	agross@kernel.org, bjorn.andersson@linaro.org,
	tglx@linutronix.de, linux-arm-msm@vger.kernel.org
Subject: [PATCH AUTOSEL 5.10 10/21] irqchip/qcom-pdc: Fix broken locking
Date: Mon, 28 Mar 2022 07:22:43 -0400	[thread overview]
Message-ID: <20220328112254.1556286-10-sashal@kernel.org> (raw)
In-Reply-To: <20220328112254.1556286-1-sashal@kernel.org>

From: Marc Zyngier <maz@kernel.org>

[ Upstream commit a6aca2f460e203781dc41391913cc5b54f4bc0ce ]

pdc_enable_intr() serves as a primitive to qcom_pdc_gic_{en,dis}able,
and has a raw spinlock for mutual exclusion, which is uses with
interruptible primitives.

This means that this critical section can itself be interrupted.
Should the interrupt also be a PDC interrupt, and the endpoint driver
perform an irq_disable() on that interrupt, we end-up in a deadlock.

Fix this by using the irqsave/irqrestore variants of the locking
primitives.

Signed-off-by: Marc Zyngier <maz@kernel.org>
Reviewed-by: Maulik Shah <quic_mkshah@quicinc.com>
Link: https://lore.kernel.org/r/20220224101226.88373-5-maz@kernel.org
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
 drivers/irqchip/qcom-pdc.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/drivers/irqchip/qcom-pdc.c b/drivers/irqchip/qcom-pdc.c
index 5dc63c20b67e..fc747b7f4983 100644
--- a/drivers/irqchip/qcom-pdc.c
+++ b/drivers/irqchip/qcom-pdc.c
@@ -74,17 +74,18 @@ static int qcom_pdc_gic_set_irqchip_state(struct irq_data *d,
 static void pdc_enable_intr(struct irq_data *d, bool on)
 {
 	int pin_out = d->hwirq;
+	unsigned long flags;
 	u32 index, mask;
 	u32 enable;
 
 	index = pin_out / 32;
 	mask = pin_out % 32;
 
-	raw_spin_lock(&pdc_lock);
+	raw_spin_lock_irqsave(&pdc_lock, flags);
 	enable = pdc_reg_read(IRQ_ENABLE_BANK, index);
 	enable = on ? ENABLE_INTR(enable, mask) : CLEAR_INTR(enable, mask);
 	pdc_reg_write(IRQ_ENABLE_BANK, index, enable);
-	raw_spin_unlock(&pdc_lock);
+	raw_spin_unlock_irqrestore(&pdc_lock, flags);
 }
 
 static void qcom_pdc_gic_disable(struct irq_data *d)
-- 
2.34.1


  parent reply	other threads:[~2022-03-28 11:24 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-03-28 11:22 [PATCH AUTOSEL 5.10 01/21] LSM: general protection fault in legacy_parse_param Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 02/21] regulator: rpi-panel: Handle I2C errors/timing to the Atmel Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 03/21] gcc-plugins/stackleak: Exactly match strings instead of prefixes Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 04/21] pinctrl: npcm: Fix broken references to chip->parent_device Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 05/21] block, bfq: don't move oom_bfqq Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 06/21] selinux: use correct type for context length Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 07/21] selinux: allow FIOCLEX and FIONCLEX with policy capability Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 08/21] loop: use sysfs_emit() in the sysfs xxx show() Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 09/21] Fix incorrect type in assignment of ipv6 port for audit Sasha Levin
2022-03-28 11:22 ` Sasha Levin [this message]
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 11/21] irqchip/nvic: Release nvic_base upon failure Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 12/21] fs/binfmt_elf: Fix AT_PHDR for unusual ELF files Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 13/21] bfq: fix use-after-free in bfq_dispatch_request Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 14/21] ACPICA: Avoid walking the ACPI Namespace if it is not there Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 15/21] lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 16/21] Revert "Revert "block, bfq: honor already-setup queue merges"" Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 17/21] ACPI/APEI: Limit printable size of BERT table data Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 18/21] PM: core: keep irq flags in device_pm_check_callbacks() Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 19/21] parisc: Fix handling off probe non-access faults Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 20/21] nvme-tcp: lockdep: annotate in-kernel sockets Sasha Levin
2022-03-28 11:22 ` [PATCH AUTOSEL 5.10 21/21] spi: tegra20: Use of_device_get_match_data() Sasha Levin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20220328112254.1556286-10-sashal@kernel.org \
    --to=sashal@kernel.org \
    --cc=agross@kernel.org \
    --cc=bjorn.andersson@linaro.org \
    --cc=linux-arm-msm@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=maz@kernel.org \
    --cc=quic_mkshah@quicinc.com \
    --cc=stable@vger.kernel.org \
    --cc=tglx@linutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox