diff options
author | imp <imp@FreeBSD.org> | 2005-09-19 03:10:21 +0000 |
---|---|---|
committer | imp <imp@FreeBSD.org> | 2005-09-19 03:10:21 +0000 |
commit | 4e70215e6bf590140205774753c8b0a1f1fe9a36 (patch) | |
tree | c3358cebc77043ea8b2a3a5036b02dad6a674b7e /sys/dev/lge | |
parent | 37a0bbb7e543c6b2a2f055d676d5a94f781d7738 (diff) | |
download | FreeBSD-src-4e70215e6bf590140205774753c8b0a1f1fe9a36.zip FreeBSD-src-4e70215e6bf590140205774753c8b0a1f1fe9a36.tar.gz |
Make sure that we call if_free(ifp) after bus_teardown_intr. Since we
could get an interrupt after we free the ifp, and the interrupt
handler depended on the ifp being still alive, this could, in theory,
cause a crash. Eliminate this possibility by moving the if_free to
after the bus_teardown_intr() call.
Diffstat (limited to 'sys/dev/lge')
-rw-r--r-- | sys/dev/lge/if_lge.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/dev/lge/if_lge.c b/sys/dev/lge/if_lge.c index f1d73d4..9ba8542 100644 --- a/sys/dev/lge/if_lge.c +++ b/sys/dev/lge/if_lge.c @@ -627,7 +627,6 @@ lge_detach(dev) lge_reset(sc); lge_stop(sc); ether_ifdetach(ifp); - if_free(ifp); bus_generic_detach(dev); device_delete_child(dev, sc->lge_miibus); @@ -637,6 +636,7 @@ lge_detach(dev) bus_release_resource(dev, LGE_RES, LGE_RID, sc->lge_res); contigfree(sc->lge_ldata, sizeof(struct lge_list_data), M_DEVBUF); + if_free(ifp); lge_free_jumbo_mem(sc); splx(s); |