tree cf0a0219790a7fac9acf08727ad63de14c6c6bb4
parent 940801b27e021b3494a44bc93be3c73fadbe4c2f
author Roland Dreier <rolandd@cisco.com> 1208405374 -0700
committer Roland Dreier <rolandd@cisco.com> 1208405374 -0700

RDMA/nes: Free IRQ before killing tasklet

Move the free_irq() call in nes_remove() to before the tasklet_kill();
otherwise there is a window after tasklet_kill() where a new interrupt
can be handled and reschedule the tasklet, leading to a use-after-free
crash.

Cc: <stable@kernel.org>
Signed-off-by: Roland Dreier <rolandd@cisco.com>