@@ -2796,10 +2796,14 @@ asmlinkage long compat_sys_ioctl(unsigned int fd, unsigned int cmd,
if (!filp)
goto out;
+ error = -EIO;
+ if (!file_hotplug_read_trylock(filp))
+ goto out_fput;
+
/* RED-PEN how should LSM module know it's handling 32bit? */
error = security_file_ioctl(filp, cmd, arg);
if (error)
- goto out_fput;
+ goto out_unlock;
/*
* To allow the compat_ioctl handlers to be self contained
@@ -2825,7 +2829,7 @@ asmlinkage long compat_sys_ioctl(unsigned int fd, unsigned int cmd,
if (filp->f_op && filp->f_op->compat_ioctl) {
error = filp->f_op->compat_ioctl(filp, cmd, arg);
if (error != -ENOIOCTLCMD)
- goto out_fput;
+ goto out_unlock;
}
if (!filp->f_op ||
@@ -2853,18 +2857,20 @@ asmlinkage long compat_sys_ioctl(unsigned int fd, unsigned int cmd,
error = -EINVAL;
}
- goto out_fput;
+ goto out_unlock;
found_handler:
if (t->handler) {
lock_kernel();
error = t->handler(fd, cmd, arg, filp);
unlock_kernel();
- goto out_fput;
+ goto out_unlock;
}
do_ioctl:
error = do_vfs_ioctl(filp, fd, cmd, arg);
+ out_unlock:
+ file_hotplug_read_unlock(filp);
out_fput:
fput_light(filp, fput_needed);
out:
@@ -577,11 +577,17 @@ SYSCALL_DEFINE3(ioctl, unsigned int, fd, unsigned int, cmd, unsigned long, arg)
if (!filp)
goto out;
+ error = -EIO;
+ if (!file_hotplug_read_trylock(filp))
+ goto out_fput;
+
error = security_file_ioctl(filp, cmd, arg);
if (error)
- goto out_fput;
+ goto out_unlock;
error = do_vfs_ioctl(filp, fd, cmd, arg);
+ out_unlock:
+ file_hotplug_read_unlock(filp);
out_fput:
fput_light(filp, fput_needed);
out: