xen: disable interrupts before saving in percpu
authorJeremy Fitzhardinge <jeremy@goop.org>
Wed, 4 Feb 2009 00:01:46 +0000 (16:01 -0800)
committerH. Peter Anvin <hpa@zytor.com>
Wed, 4 Feb 2009 01:22:40 +0000 (17:22 -0800)
Impact: Fix race condition

xen_mc_batch has a small preempt race where it takes the address of a
percpu variable immediately before disabling interrupts, thereby
leaving a small window in which we may migrate to another cpu and save
the flags in the wrong percpu variable.  Disable interrupts before
saving the old flags in a percpu.

Signed-off-by: Jeremy Fitzhardinge <jeremy.fitzhardinge@citrix.com>
Signed-off-by: H. Peter Anvin <hpa@zytor.com>
arch/x86/xen/multicalls.h

index 858938241616ab88ff53700a4463c698c11dad3d..fa3e10725d985021d55f9f44beaff3cd05c0ad7a 100644 (file)
@@ -19,8 +19,10 @@ DECLARE_PER_CPU(unsigned long, xen_mc_irq_flags);
    paired with xen_mc_issue() */
 static inline void xen_mc_batch(void)
 {
+       unsigned long flags;
        /* need to disable interrupts until this entry is complete */
-       local_irq_save(__get_cpu_var(xen_mc_irq_flags));
+       local_irq_save(flags);
+       __get_cpu_var(xen_mc_irq_flags) = flags;
 }
 
 static inline struct multicall_space xen_mc_entry(size_t args)