fd42bfd1bb
In function xenvif_disconnect_queue(), the value of queue->rx_irq is
zeroed *before* queue->task is stopped. Unfortunately that task may call
notify_remote_via_irq(queue->rx_irq) and calling that function with a
zero value results in a NULL pointer dereference in evtchn_from_irq().
This patch simply re-orders things, stopping all tasks before zero-ing the
irq values, thereby avoiding the possibility of the race.
Fixes:
|
||
|---|---|---|
| .. | ||
| Makefile | ||
| common.h | ||
| hash.c | ||
| interface.c | ||
| netback.c | ||
| rx.c | ||
| xenbus.c | ||