<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">ChangeSet 1.2446, 2004/11/01 13:04:46-08:00, akpm@osdl.org

[PATCH] Possible race in sysfs_read_file() and sysfs_write_file()

From: Simon Derr &lt;Simon.Derr@bull.net&gt;

Add a `needs_read_fill' field in sysfs_buffer so that reading after a write in
a sysfs file returns valid data.

(instead of the data that have been written, that may be invalid or at the
wrong offset)

Signed-off-by: Simon Derr &lt;simon.derr@bull.net&gt;
Signed-off-by: Andrew Morton &lt;akpm@osdl.org&gt;
Signed-off-by: Greg Kroah-Hartman &lt;greg@kroah.com&gt;


 fs/sysfs/file.c |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletion(-)


diff -Nru a/fs/sysfs/file.c b/fs/sysfs/file.c
--- a/fs/sysfs/file.c	2004-11-01 13:36:42 -08:00
+++ b/fs/sysfs/file.c	2004-11-01 13:36:42 -08:00
@@ -55,6 +55,7 @@
 	char			* page;
 	struct sysfs_ops	* ops;
 	struct semaphore	sem;
+	int			needs_read_fill;
 };
 
 
@@ -82,6 +83,7 @@
 		return -ENOMEM;
 
 	count = ops-&gt;show(kobj,attr,buffer-&gt;page);
+	buffer-&gt;needs_read_fill = 0;
 	BUG_ON(count &gt; (ssize_t)PAGE_SIZE);
 	if (count &gt;= 0)
 		buffer-&gt;count = count;
@@ -146,7 +148,7 @@
 	ssize_t retval = 0;
 
 	down(&amp;buffer-&gt;sem);
-	if ((!*ppos) || (!buffer-&gt;page)) {
+	if (buffer-&gt;needs_read_fill) {
 		if ((retval = fill_read_buffer(file-&gt;f_dentry,buffer)))
 			goto out;
 	}
@@ -182,6 +184,7 @@
 	if (count &gt;= PAGE_SIZE)
 		count = PAGE_SIZE - 1;
 	error = copy_from_user(buffer-&gt;page,buf,count);
+	buffer-&gt;needs_read_fill = 1;
 	return error ? -EFAULT : count;
 }
 
@@ -299,6 +302,7 @@
 	if (buffer) {
 		memset(buffer,0,sizeof(struct sysfs_buffer));
 		init_MUTEX(&amp;buffer-&gt;sem);
+		buffer-&gt;needs_read_fill = 1;
 		buffer-&gt;ops = ops;
 		file-&gt;private_data = buffer;
 	} else
</pre></body></html>