ub: cdma: delete queues before the resources they refer to · Pull Request !1136 · OpenCloudOS/OpenCloudOS-Kernel

## Problem

When a cdma device goes away, `cdma_release_table_res()` walks the device tables
in this order: CTP table, JFS table, JFC table, and only then the queue table.

`cdma_delete_queue()` calls `cdma_delete_queue_res()` for kernel queues, and that
helper reads `queue->jfs->id`, `queue->tp->tp_id` and `queue->jfc->id` to destroy
the resources the queue owns. By the time the queue loop runs, those objects have
already been freed by the loops above, so any kernel queue that is still
registered — one whose creator never freed it, or one left behind by a failing
client teardown — makes the device removal read freed memory and hand whatever it
finds there to `cdma_delete_jfs()`, `cdma_delete_ctp()` and `cdma_delete_jfc()`
as an id.

## Fix

Delete the queues first. `cdma_delete_queue_res()` destroys each kernel queue's
own resources, so the loops that follow only see what is left in the tables.
Removing the current entry while iterating with `idr_for_each_entry()` is what the
existing loops already rely on.

## Verification

- `scripts/checkpatch.pl --no-signoff --strict`: 0 errors, 0 warnings.
- arm64 build (`CONFIG_UB=y`, `CONFIG_UB_UBUS`, `CONFIG_UB_UBUS_BUS`, `CONFIG_UB_UBUS_USI`, `CONFIG_UB_UMMU_CORE`, `CONFIG_UB_UBASE`, `CONFIG_UB_CDMA=y`, target `drivers/ub/cdma/`, Bootlin aarch64 gcc 15.3.0, `W=1`): baseline and patched trees both build with exit 0 and produce all 23 objects; both show the same single pre-existing `-Wunused-but-set-variable` warning in `cdma_jfc.c`, which is not touched here.
- Not run: runtime test. No UB/CDMA hardware is available in the development environment, so the device removal path was not exercised.

类型	指派人员	状态
审查	zoucao Huang Cun Jianping Liu	已完成 (0/0人)
测试	Jianping Liu	已完成 (0/0人)

GVPOpenCloudOS / OpenCloudOS-Kernel

搜索帮助

GVP OpenCloudOS / OpenCloudOS-Kernel