Skip to content

Commit 4cb6560

Browse files
Rafał Miłeckijacek-anaszewski
authored andcommitted
leds: trigger: netdev: fix refcnt leak on interface rename
Renaming a netdev-trigger-tracked interface was resulting in an unbalanced dev_hold(). Example: > iw phy phy0 interface add foo type __ap > echo netdev > trigger > echo foo > device_name > ip link set foo name bar > iw dev bar del [ 237.355366] unregister_netdevice: waiting for bar to become free. Usage count = 1 [ 247.435362] unregister_netdevice: waiting for bar to become free. Usage count = 1 [ 257.545366] unregister_netdevice: waiting for bar to become free. Usage count = 1 Above problem was caused by trigger checking a dev->name which obviously changes after renaming an interface. It meant missing all further events including the NETDEV_UNREGISTER which is required for calling dev_put(). This change fixes that by: 1) Comparing device struct *address* for notification-filtering purposes 2) Dropping unneeded NETDEV_CHANGENAME code (no behavior change) Fixes: 06f502f ("leds: trigger: Introduce a NETDEV trigger") Signed-off-by: Rafał Miłecki <rafal@milecki.pl> Acked-by: Pavel Machek <pavel@ucw.cz> Signed-off-by: Jacek Anaszewski <jacek.anaszewski@gmail.com>
1 parent 9e98c67 commit 4cb6560

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

drivers/leds/trigger/ledtrig-netdev.c

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -301,11 +301,11 @@ static int netdev_trig_notify(struct notifier_block *nb,
301301
container_of(nb, struct led_netdev_data, notifier);
302302

303303
if (evt != NETDEV_UP && evt != NETDEV_DOWN && evt != NETDEV_CHANGE
304-
&& evt != NETDEV_REGISTER && evt != NETDEV_UNREGISTER
305-
&& evt != NETDEV_CHANGENAME)
304+
&& evt != NETDEV_REGISTER && evt != NETDEV_UNREGISTER)
306305
return NOTIFY_DONE;
307306

308-
if (strcmp(dev->name, trigger_data->device_name))
307+
if (!(dev == trigger_data->net_dev ||
308+
(evt == NETDEV_REGISTER && !strcmp(dev->name, trigger_data->device_name))))
309309
return NOTIFY_DONE;
310310

311311
cancel_delayed_work_sync(&trigger_data->work);
@@ -320,12 +320,9 @@ static int netdev_trig_notify(struct notifier_block *nb,
320320
dev_hold(dev);
321321
trigger_data->net_dev = dev;
322322
break;
323-
case NETDEV_CHANGENAME:
324323
case NETDEV_UNREGISTER:
325-
if (trigger_data->net_dev) {
326-
dev_put(trigger_data->net_dev);
327-
trigger_data->net_dev = NULL;
328-
}
324+
dev_put(trigger_data->net_dev);
325+
trigger_data->net_dev = NULL;
329326
break;
330327
case NETDEV_UP:
331328
case NETDEV_CHANGE:

0 commit comments

Comments
 (0)