devlink: disallow reload operation during device cleanup
authorJiri Pirko <jiri@mellanox.com>
Sat, 9 Nov 2019 10:29:46 +0000 (11:29 +0100)
committerDavid S. Miller <davem@davemloft.net>
Sun, 10 Nov 2019 03:38:36 +0000 (19:38 -0800)
commit5a508a254bed9a2e36a5fb96c9065532a6bf1e9c
treede6176184a5f1cb07d9875e88f695ab503102935
parent0058b0a506e40d9a2c62015fe92eb64a44d78cd9
devlink: disallow reload operation during device cleanup

There is a race between driver code that does setup/cleanup of device
and devlink reload operation that in some drivers works with the same
code. Use after free could we easily obtained by running:

while true; do
        echo "0000:00:10.0" >/sys/bus/pci/drivers/mlxsw_spectrum2/bind
        devlink dev reload pci/0000:00:10.0 &
        echo "0000:00:10.0" >/sys/bus/pci/drivers/mlxsw_spectrum2/unbind
done

Fix this by enabling reload only after setup of device is complete and
disabling it at the beginning of the cleanup process.

Reported-by: Ido Schimmel <idosch@mellanox.com>
Fixes: 2d8dc5bbf4e7 ("devlink: Add support for reload")
Signed-off-by: Jiri Pirko <jiri@mellanox.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ethernet/mellanox/mlx4/main.c
drivers/net/ethernet/mellanox/mlxsw/core.c
drivers/net/netdevsim/dev.c
include/net/devlink.h
net/core/devlink.c