From: Roland Dreier <rolandd@cisco.com>
Date: Thu, 17 Apr 2008 04:09:34 +0000 (-0700)
Subject: RDMA/nes: Free IRQ before killing tasklet
X-Git-Tag: v2.6.26-rc1~1156^2~7
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4cd1e5eb3cbe6e0cc934959770b4c60eac6ecf66;p=pandora-kernel.git

RDMA/nes: Free IRQ before killing tasklet

Move the free_irq() call in nes_remove() to before the tasklet_kill();
otherwise there is a window after tasklet_kill() where a new interrupt
can be handled and reschedule the tasklet, leading to a use-after-free
crash.

Cc: <stable@kernel.org>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
---

Reading git-diff-tree failed