The patch below does not apply to the 3.0-stable tree.
If someone wants it applied there, or to any other stable or longterm
tree, then please email the backport, including the original git commit
id to <sta...@kernel.org>.

thanks,

greg k-h

------------------ original commit in Linus's tree ------------------

>From 53cc2820acbdbcc768675bfaff321f3a8680a317 Mon Sep 17 00:00:00 2001
From: Thomas Gleixner <t...@linutronix.de>
Date: Fri, 22 Jul 2011 09:12:50 +0000
Subject: [PATCH] rtc: Handle errors correctly in rtc_irq_set_state()

In rtc_irq_set_state, the code checks the correctness of the parameters,
but then goes on to unconditionally arms/disarms the hrtimer. Thus a
random task might arm/disarm rtc timer and surprise the real owner by
either generating events or by stopping them.

Cc: sta...@kernel.org
Signed-off-by: Thomas Gleixner <t...@linutronix.de>
Signed-off-by: John Stultz <john.stu...@linaro.org>

diff --git a/drivers/rtc/interface.c b/drivers/rtc/interface.c
index df68618..b6bf57f 100644
--- a/drivers/rtc/interface.c
+++ b/drivers/rtc/interface.c
@@ -656,6 +656,8 @@ int rtc_irq_set_state(struct rtc_device *rtc, struct 
rtc_task *task, int enabled
                err = -EBUSY;
        if (rtc->irq_task != task)
                err = -EACCES;
+       if (err)
+               goto out;
 
        if (enabled) {
                ktime_t period = ktime_set(0, NSEC_PER_SEC/rtc->irq_freq);
@@ -664,6 +666,7 @@ int rtc_irq_set_state(struct rtc_device *rtc, struct 
rtc_task *task, int enabled
                hrtimer_cancel(&rtc->pie_timer);
        }
        rtc->pie_enabled = enabled;
+out:
        spin_unlock_irqrestore(&rtc->irq_task_lock, flags);
 
        return err;

_______________________________________________
stable mailing list
stable@linux.kernel.org
http://linux.kernel.org/mailman/listinfo/stable

Reply via email to