diff options
| author | goggin, edward <egoggin@emc.com> | 2005-11-08 15:02:23 -0500 |
|---|---|---|
| committer | James Bottomley <jejb@mulgrave.(none)> | 2005-11-08 16:09:53 -0500 |
| commit | 34ea80ec6a02ad02e6b9c75c478c18e5880d6713 (patch) | |
| tree | 87bf4eb5340e5e0d8f54ad0551478e64f63078ac | |
| parent | 383f9749505cef0a30dbd7109db7fe469aa64753 (diff) | |
| download | linux-34ea80ec6a02ad02e6b9c75c478c18e5880d6713.tar.gz linux-34ea80ec6a02ad02e6b9c75c478c18e5880d6713.tar.bz2 linux-34ea80ec6a02ad02e6b9c75c478c18e5880d6713.zip | |
[SCSI] fix usb storage oops
The problem is that scsi_run_queue is called from scsi_next_command()
after doing a scsi_put_command. If the command was the only thing
holding the reference on the scsi_device then the resulting device put
will tear down the block queue. Fix this by taking a reference to the
device and holding it around scsi_run_queue()
Signed-off-by: James Bottomley <James.Bottomley@SteelEye.com>
| -rw-r--r-- | drivers/scsi/scsi_lib.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/drivers/scsi/scsi_lib.c b/drivers/scsi/scsi_lib.c index 4afef5cdcb17..ce9d73a292e2 100644 --- a/drivers/scsi/scsi_lib.c +++ b/drivers/scsi/scsi_lib.c @@ -542,10 +542,17 @@ static void scsi_requeue_command(struct request_queue *q, struct scsi_cmnd *cmd) void scsi_next_command(struct scsi_cmnd *cmd) { - struct request_queue *q = cmd->device->request_queue; + struct scsi_device *sdev = cmd->device; + struct request_queue *q = sdev->request_queue; + + /* need to hold a reference on the device before we let go of the cmd */ + get_device(&sdev->sdev_gendev); scsi_put_command(cmd); scsi_run_queue(q); + + /* ok to remove device now */ + put_device(&sdev->sdev_gendev); } void scsi_run_host_queues(struct Scsi_Host *shost) |