xen/events: don't bind non-percpu VIRQs with percpu chip
authorDavid Vrabel <david.vrabel@citrix.com>
Tue, 19 May 2015 17:40:49 +0000 (18:40 +0100)
committerJiri Slaby <jslaby@suse.cz>
Wed, 3 Jun 2015 09:33:07 +0000 (11:33 +0200)
commitdb02077307011751a0225845664bb212d76e87bc
tree8d99709a9ce52cc3be145e2e9f815b85a76942c5
parent74b65e99d99c940a7fa731a317d13bc0b3b34911
xen/events: don't bind non-percpu VIRQs with percpu chip

commit 77bb3dfdc0d554befad58fdefbc41be5bc3ed38a upstream.

A non-percpu VIRQ (e.g., VIRQ_CONSOLE) may be freed on a different
VCPU than it is bound to.  This can result in a race between
handle_percpu_irq() and removing the action in __free_irq() because
handle_percpu_irq() does not take desc->lock.  The interrupt handler
sees a NULL action and oopses.

Only use the percpu chip/handler for per-CPU VIRQs (like VIRQ_TIMER).

  # cat /proc/interrupts | grep virq
   40:      87246          0  xen-percpu-virq      timer0
   44:          0          0  xen-percpu-virq      debug0
   47:          0      20995  xen-percpu-virq      timer1
   51:          0          0  xen-percpu-virq      debug1
   69:          0          0   xen-dyn-virq      xen-pcpu
   74:          0          0   xen-dyn-virq      mce
   75:         29          0   xen-dyn-virq      hvc_console

Signed-off-by: David Vrabel <david.vrabel@citrix.com>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
drivers/tty/hvc/hvc_xen.c
drivers/xen/events.c
include/xen/events.h