History

ipv6: do not call ndisc_send_rs() with write lock

Because vxlan module will call ip6_dst_lookup() in TX path, which will hold write lock. So we have to release this write lock before calling ndisc_send_rs(), otherwise could deadlock.

Cong Wang committed 13 years ago

Commit caf92bc1 parent 034dfc51 file · +7 −3Browse files

Unified · Split

net/ipv6/addrconf.c+7−3
@@ -3090,6 +3090,7 @@ static int addrconf_ifdown(struct net_device *dev, int how) · 3089 unmodified lines
30903090 static void addrconf_rs_timer(unsigned long data)
30913091 {
30923092 struct inet6_dev *idev = (struct inet6_dev *)data;
3093+ struct net_device *dev = idev->dev;
30933094 struct in6_addr lladdr;
30943095
30953096 write_lock(&idev->lock);
@@ -3104,12 +3105,14 @@ static void addrconf_rs_timer(unsigned long data) · 8 unmodified lines
31043105 goto out;
31053106
31063107 if (idev->rs_probes++ < idev->cnf.rtr_solicits) {
3107− if (!__ipv6_get_lladdr(idev, &lladdr, IFA_F_TENTATIVE))
3108− ndisc_send_rs(idev->dev, &lladdr,
3108+ write_unlock(&idev->lock);
3109+ if (!ipv6_get_lladdr(dev, &lladdr, IFA_F_TENTATIVE))
3110+ ndisc_send_rs(dev, &lladdr,
31093111 &in6addr_linklocal_allrouters);
31103112 else
3111− goto out;
3113+ goto put;
31123114
3115+ write_lock(&idev->lock);
31133116 /* The wait after the last probe can be shorter */
31143117 addrconf_mod_rs_timer(idev, (idev->rs_probes ==
31153118 idev->cnf.rtr_solicits) ?
@@ -3125,6 +3128,7 @@ static void addrconf_rs_timer(unsigned long data) · 9 unmodified lines
31253128
31263129 out:
31273130 write_unlock(&idev->lock);
3131+put:
31283132 in6_dev_put(idev);
31293133 }
31303134