tree b0196884ead501481a3ae3a27d45b41b43ec117d
parent c79bd89282136a4516e842fa542d6abf902ddeac
author Michael S. Tsirkin <mst@redhat.com> 1284915751 +0200
committer Marcelo Tosatti <mtosatti@redhat.com> 1285252311 -0300

KVM: fix irqfd assign/deassign race

I think I see the following (theoretical) race:

During irqfd assign, we drop irqfds lock before we
schedule inject work. Therefore, deassign running
on another CPU could cause shutdown and flush to run
before inject, causing user after free in inject.

A simple fix it to schedule inject under the lock.

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Acked-by: Gregory Haskins <ghaskins@novell.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>