utdelete.c 19.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7
/*******************************************************************************
 *
 * Module Name: utdelete - object deletion and reference count utilities
 *
 ******************************************************************************/

/*
8
 * Copyright (C) 2000 - 2012, Intel Corp.
L
Linus Torvalds 已提交
9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions, and the following disclaimer,
 *    without modification.
 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
 *    substantially similar to the "NO WARRANTY" disclaimer below
 *    ("Disclaimer") and any redistribution must be conditioned upon
 *    including a substantially similar Disclaimer requirement for further
 *    binary redistribution.
 * 3. Neither the names of the above-listed copyright holders nor the names
 *    of any contributors may be used to endorse or promote products derived
 *    from this software without specific prior written permission.
 *
 * Alternatively, this software may be distributed under the terms of the
 * GNU General Public License ("GPL") version 2 as published by the Free
 * Software Foundation.
 *
 * NO WARRANTY
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGES.
 */

#include <acpi/acpi.h>
L
Len Brown 已提交
45 46 47 48
#include "accommon.h"
#include "acinterp.h"
#include "acnamesp.h"
#include "acevents.h"
L
Linus Torvalds 已提交
49 50

#define _COMPONENT          ACPI_UTILITIES
L
Len Brown 已提交
51
ACPI_MODULE_NAME("utdelete")
L
Linus Torvalds 已提交
52

R
Robert Moore 已提交
53
/* Local prototypes */
L
Len Brown 已提交
54
static void acpi_ut_delete_internal_obj(union acpi_operand_object *object);
R
Robert Moore 已提交
55 56

static void
L
Len Brown 已提交
57
acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action);
L
Linus Torvalds 已提交
58 59 60 61 62

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_delete_internal_obj
 *
63
 * PARAMETERS:  object         - Object to be deleted
L
Linus Torvalds 已提交
64 65 66 67 68 69 70 71
 *
 * RETURN:      None
 *
 * DESCRIPTION: Low level object deletion, after reference counts have been
 *              updated (All reference counts, including sub-objects!)
 *
 ******************************************************************************/

L
Len Brown 已提交
72
static void acpi_ut_delete_internal_obj(union acpi_operand_object *object)
L
Linus Torvalds 已提交
73
{
L
Len Brown 已提交
74 75 76 77
	void *obj_pointer = NULL;
	union acpi_operand_object *handler_desc;
	union acpi_operand_object *second_desc;
	union acpi_operand_object *next_desc;
78
	union acpi_operand_object **last_obj_ptr;
L
Linus Torvalds 已提交
79

B
Bob Moore 已提交
80
	ACPI_FUNCTION_TRACE_PTR(ut_delete_internal_obj, object);
L
Linus Torvalds 已提交
81 82 83 84 85 86 87 88 89

	if (!object) {
		return_VOID;
	}

	/*
	 * Must delete or free any pointers within the object that are not
	 * actual ACPI objects (for example, a raw buffer pointer).
	 */
90
	switch (object->common.type) {
L
Linus Torvalds 已提交
91 92
	case ACPI_TYPE_STRING:

L
Len Brown 已提交
93 94 95
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "**** String %p, ptr %p\n", object,
				  object->string.pointer));
L
Linus Torvalds 已提交
96 97 98 99

		/* Free the actual string buffer */

		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
B
Bob Moore 已提交
100

L
Linus Torvalds 已提交
101 102 103 104 105 106 107 108
			/* But only if it is NOT a pointer into an ACPI table */

			obj_pointer = object->string.pointer;
		}
		break;

	case ACPI_TYPE_BUFFER:

L
Len Brown 已提交
109 110 111
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "**** Buffer %p, ptr %p\n", object,
				  object->buffer.pointer));
L
Linus Torvalds 已提交
112 113 114 115

		/* Free the actual buffer */

		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
B
Bob Moore 已提交
116

L
Linus Torvalds 已提交
117 118 119 120 121 122 123 124
			/* But only if it is NOT a pointer into an ACPI table */

			obj_pointer = object->buffer.pointer;
		}
		break;

	case ACPI_TYPE_PACKAGE:

L
Len Brown 已提交
125 126 127
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  " **** Package of count %X\n",
				  object->package.count));
L
Linus Torvalds 已提交
128 129 130 131 132 133 134 135 136 137 138

		/*
		 * Elements of the package are not handled here, they are deleted
		 * separately
		 */

		/* Free the (variable length) element pointer array */

		obj_pointer = object->package.elements;
		break;

139 140 141 142
		/*
		 * These objects have a possible list of notify handlers.
		 * Device object also may have a GPE block.
		 */
L
Linus Torvalds 已提交
143 144 145
	case ACPI_TYPE_DEVICE:

		if (object->device.gpe_block) {
L
Len Brown 已提交
146 147
			(void)acpi_ev_delete_gpe_block(object->device.
						       gpe_block);
L
Linus Torvalds 已提交
148 149
		}

150 151 152 153 154
		/*lint -fallthrough */

	case ACPI_TYPE_PROCESSOR:
	case ACPI_TYPE_THERMAL:

155
		/* Walk the address handler list for this object */
L
Linus Torvalds 已提交
156

157
		handler_desc = object->common_notify.handler;
L
Linus Torvalds 已提交
158 159
		while (handler_desc) {
			next_desc = handler_desc->address_space.next;
L
Len Brown 已提交
160
			acpi_ut_remove_reference(handler_desc);
L
Linus Torvalds 已提交
161 162 163 164 165 166
			handler_desc = next_desc;
		}
		break;

	case ACPI_TYPE_MUTEX:

L
Len Brown 已提交
167
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
B
Bob Moore 已提交
168 169 170
				  "***** Mutex %p, OS Mutex %p\n",
				  object, object->mutex.os_mutex));

171
		if (object == acpi_gbl_global_lock_mutex) {
172 173

			/* Global Lock has extra semaphore */
B
Bob Moore 已提交
174 175 176 177 178

			(void)
			    acpi_os_delete_semaphore
			    (acpi_gbl_global_lock_semaphore);
			acpi_gbl_global_lock_semaphore = NULL;
179 180 181 182

			acpi_os_delete_mutex(object->mutex.os_mutex);
			acpi_gbl_global_lock_mutex = NULL;
		} else {
183
			acpi_ex_unlink_mutex(object);
184
			acpi_os_delete_mutex(object->mutex.os_mutex);
B
Bob Moore 已提交
185
		}
L
Linus Torvalds 已提交
186 187 188 189
		break;

	case ACPI_TYPE_EVENT:

L
Len Brown 已提交
190
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
B
Bob Moore 已提交
191 192
				  "***** Event %p, OS Semaphore %p\n",
				  object, object->event.os_semaphore));
L
Linus Torvalds 已提交
193

B
Bob Moore 已提交
194 195
		(void)acpi_os_delete_semaphore(object->event.os_semaphore);
		object->event.os_semaphore = NULL;
L
Linus Torvalds 已提交
196 197 198 199
		break;

	case ACPI_TYPE_METHOD:

L
Len Brown 已提交
200 201
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "***** Method %p\n", object));
L
Linus Torvalds 已提交
202

B
Bob Moore 已提交
203
		/* Delete the method mutex if it exists */
L
Linus Torvalds 已提交
204

B
Bob Moore 已提交
205 206 207 208 209
		if (object->method.mutex) {
			acpi_os_delete_mutex(object->method.mutex->mutex.
					     os_mutex);
			acpi_ut_delete_object_desc(object->method.mutex);
			object->method.mutex = NULL;
L
Linus Torvalds 已提交
210 211 212 213 214
		}
		break;

	case ACPI_TYPE_REGION:

L
Len Brown 已提交
215 216
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "***** Region %p\n", object));
L
Linus Torvalds 已提交
217

218 219 220 221 222 223 224 225
		/*
		 * Update address_range list. However, only permanent regions
		 * are installed in this list. (Not created within a method)
		 */
		if (!(object->region.node->flags & ANOBJ_TEMPORARY)) {
			acpi_ut_remove_address_range(object->region.space_id,
						     object->region.node);
		}
226

L
Len Brown 已提交
227
		second_desc = acpi_ns_get_secondary_object(object);
L
Linus Torvalds 已提交
228 229 230 231 232 233 234 235
		if (second_desc) {
			/*
			 * Free the region_context if and only if the handler is one of the
			 * default handlers -- and therefore, we created the context object
			 * locally, it was not created by an external caller.
			 */
			handler_desc = object->region.handler;
			if (handler_desc) {
236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255
				next_desc =
				    handler_desc->address_space.region_list;
				last_obj_ptr =
				    &handler_desc->address_space.region_list;

				/* Remove the region object from the handler's list */

				while (next_desc) {
					if (next_desc == object) {
						*last_obj_ptr =
						    next_desc->region.next;
						break;
					}

					/* Walk the linked list of handler */

					last_obj_ptr = &next_desc->region.next;
					next_desc = next_desc->region.next;
				}

B
Bob Moore 已提交
256
				if (handler_desc->address_space.handler_flags &
L
Len Brown 已提交
257
				    ACPI_ADDR_HANDLER_DEFAULT_INSTALLED) {
B
Bob Moore 已提交
258 259 260 261 262 263 264 265 266 267 268 269 270 271

					/* Deactivate region and free region context */

					if (handler_desc->address_space.setup) {
						(void)handler_desc->
						    address_space.setup(object,
									ACPI_REGION_DEACTIVATE,
									handler_desc->
									address_space.
									context,
									&second_desc->
									extra.
									region_context);
					}
L
Linus Torvalds 已提交
272 273
				}

L
Len Brown 已提交
274
				acpi_ut_remove_reference(handler_desc);
L
Linus Torvalds 已提交
275 276 277 278
			}

			/* Now we can free the Extra object */

L
Len Brown 已提交
279
			acpi_ut_delete_object_desc(second_desc);
L
Linus Torvalds 已提交
280 281 282 283 284
		}
		break;

	case ACPI_TYPE_BUFFER_FIELD:

L
Len Brown 已提交
285 286
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "***** Buffer Field %p\n", object));
L
Linus Torvalds 已提交
287

L
Len Brown 已提交
288
		second_desc = acpi_ns_get_secondary_object(object);
L
Linus Torvalds 已提交
289
		if (second_desc) {
290 291 292 293 294 295 296 297 298 299 300
			acpi_ut_delete_object_desc(second_desc);
		}
		break;

	case ACPI_TYPE_LOCAL_BANK_FIELD:

		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "***** Bank Field %p\n", object));

		second_desc = acpi_ns_get_secondary_object(object);
		if (second_desc) {
L
Len Brown 已提交
301
			acpi_ut_delete_object_desc(second_desc);
L
Linus Torvalds 已提交
302 303 304 305 306 307 308 309 310 311
		}
		break;

	default:
		break;
	}

	/* Free any allocated memory (pointer within the object) found above */

	if (obj_pointer) {
L
Len Brown 已提交
312 313
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "Deleting Object Subptr %p\n", obj_pointer));
B
Bob Moore 已提交
314
		ACPI_FREE(obj_pointer);
L
Linus Torvalds 已提交
315 316 317 318
	}

	/* Now the object can be safely deleted */

L
Len Brown 已提交
319 320
	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS, "Deleting Object %p [%s]\n",
			  object, acpi_ut_get_object_type_name(object)));
L
Linus Torvalds 已提交
321

L
Len Brown 已提交
322
	acpi_ut_delete_object_desc(object);
L
Linus Torvalds 已提交
323 324 325 326 327 328 329
	return_VOID;
}

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_delete_internal_object_list
 *
R
Robert Moore 已提交
330
 * PARAMETERS:  obj_list        - Pointer to the list to be deleted
L
Linus Torvalds 已提交
331 332 333 334 335 336 337 338
 *
 * RETURN:      None
 *
 * DESCRIPTION: This function deletes an internal object list, including both
 *              simple objects and package objects
 *
 ******************************************************************************/

L
Len Brown 已提交
339
void acpi_ut_delete_internal_object_list(union acpi_operand_object **obj_list)
L
Linus Torvalds 已提交
340
{
L
Len Brown 已提交
341
	union acpi_operand_object **internal_obj;
L
Linus Torvalds 已提交
342

343
	ACPI_FUNCTION_NAME(ut_delete_internal_object_list);
L
Linus Torvalds 已提交
344 345 346 347

	/* Walk the null-terminated internal list */

	for (internal_obj = obj_list; *internal_obj; internal_obj++) {
L
Len Brown 已提交
348
		acpi_ut_remove_reference(*internal_obj);
L
Linus Torvalds 已提交
349 350 351 352
	}

	/* Free the combined parameter pointer list and object array */

B
Bob Moore 已提交
353
	ACPI_FREE(obj_list);
354
	return;
L
Linus Torvalds 已提交
355 356 357 358 359 360
}

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_update_ref_count
 *
361 362
 * PARAMETERS:  object          - Object whose ref count is to be updated
 *              action          - What to do
L
Linus Torvalds 已提交
363 364 365 366 367 368 369 370
 *
 * RETURN:      New ref count
 *
 * DESCRIPTION: Modify the ref count and return it.
 *
 ******************************************************************************/

static void
L
Len Brown 已提交
371
acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action)
L
Linus Torvalds 已提交
372
{
L
Len Brown 已提交
373 374
	u16 count;
	u16 new_count;
L
Linus Torvalds 已提交
375

B
Bob Moore 已提交
376
	ACPI_FUNCTION_NAME(ut_update_ref_count);
L
Linus Torvalds 已提交
377 378 379 380 381 382 383 384 385

	if (!object) {
		return;
	}

	count = object->common.reference_count;
	new_count = count;

	/*
B
Bob Moore 已提交
386
	 * Perform the reference count action (increment, decrement, force delete)
L
Linus Torvalds 已提交
387 388 389 390 391 392 393
	 */
	switch (action) {
	case REF_INCREMENT:

		new_count++;
		object->common.reference_count = new_count;

L
Len Brown 已提交
394 395 396
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "Obj %p Refs=%X, [Incremented]\n",
				  object, new_count));
L
Linus Torvalds 已提交
397 398 399 400 401
		break;

	case REF_DECREMENT:

		if (count < 1) {
L
Len Brown 已提交
402 403 404
			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
					  "Obj %p Refs=%X, can't decrement! (Set to 0)\n",
					  object, new_count));
L
Linus Torvalds 已提交
405 406

			new_count = 0;
L
Len Brown 已提交
407
		} else {
L
Linus Torvalds 已提交
408 409
			new_count--;

L
Len Brown 已提交
410 411 412
			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
					  "Obj %p Refs=%X, [Decremented]\n",
					  object, new_count));
L
Linus Torvalds 已提交
413 414
		}

415
		if (object->common.type == ACPI_TYPE_METHOD) {
L
Len Brown 已提交
416 417 418
			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
					  "Method Obj %p Refs=%X, [Decremented]\n",
					  object, new_count));
L
Linus Torvalds 已提交
419 420 421 422
		}

		object->common.reference_count = new_count;
		if (new_count == 0) {
L
Len Brown 已提交
423
			acpi_ut_delete_internal_obj(object);
L
Linus Torvalds 已提交
424 425 426 427 428
		}
		break;

	case REF_FORCE_DELETE:

L
Len Brown 已提交
429 430 431
		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
				  "Obj %p Refs=%X, Force delete! (Set to 0)\n",
				  object, count));
L
Linus Torvalds 已提交
432 433 434

		new_count = 0;
		object->common.reference_count = new_count;
L
Len Brown 已提交
435
		acpi_ut_delete_internal_obj(object);
L
Linus Torvalds 已提交
436 437 438 439
		break;

	default:

440
		ACPI_ERROR((AE_INFO, "Unknown action (0x%X)", action));
L
Linus Torvalds 已提交
441 442 443 444 445 446 447 448
		break;
	}

	/*
	 * Sanity check the reference count, for debug purposes only.
	 * (A deleted object will have a huge reference count)
	 */
	if (count > ACPI_MAX_REFERENCE_COUNT) {
B
Bob Moore 已提交
449
		ACPI_WARNING((AE_INFO,
450 451
			      "Large Reference Count (0x%X) in object %p",
			      count, object));
L
Linus Torvalds 已提交
452 453 454 455 456 457 458
	}
}

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_update_object_reference
 *
459
 * PARAMETERS:  object              - Increment ref count for this object
L
Linus Torvalds 已提交
460
 *                                    and all sub-objects
461
 *              action              - Either REF_INCREMENT or REF_DECREMENT or
L
Linus Torvalds 已提交
462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477
 *                                    REF_FORCE_DELETE
 *
 * RETURN:      Status
 *
 * DESCRIPTION: Increment the object reference count
 *
 * Object references are incremented when:
 * 1) An object is attached to a Node (namespace object)
 * 2) An object is copied (all subobjects must be incremented)
 *
 * Object references are decremented when:
 * 1) An object is detached from an Node
 *
 ******************************************************************************/

acpi_status
B
Bob Moore 已提交
478
acpi_ut_update_object_reference(union acpi_operand_object *object, u16 action)
L
Linus Torvalds 已提交
479
{
L
Len Brown 已提交
480 481 482
	acpi_status status = AE_OK;
	union acpi_generic_state *state_list = NULL;
	union acpi_operand_object *next_object = NULL;
483
	union acpi_operand_object *prev_object;
L
Len Brown 已提交
484
	union acpi_generic_state *state;
485
	u32 i;
L
Linus Torvalds 已提交
486

487
	ACPI_FUNCTION_NAME(ut_update_object_reference);
L
Linus Torvalds 已提交
488

489
	while (object) {
B
Bob Moore 已提交
490

491
		/* Make sure that this isn't a namespace handle */
L
Linus Torvalds 已提交
492

L
Len Brown 已提交
493 494 495
		if (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED) {
			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
					  "Object %p is NS handle\n", object));
496
			return (AE_OK);
497
		}
L
Linus Torvalds 已提交
498 499 500 501 502

		/*
		 * All sub-objects must have their reference count incremented also.
		 * Different object types have different subobjects.
		 */
503
		switch (object->common.type) {
L
Linus Torvalds 已提交
504
		case ACPI_TYPE_DEVICE:
B
Bob Moore 已提交
505 506 507
		case ACPI_TYPE_PROCESSOR:
		case ACPI_TYPE_POWER:
		case ACPI_TYPE_THERMAL:
L
Linus Torvalds 已提交
508

509 510 511 512 513 514 515 516 517 518 519 520 521 522 523
			/*
			 * Update the notify objects for these types (if present)
			 * Two lists, system and device notify handlers.
			 */
			for (i = 0; i < ACPI_NUM_NOTIFY_TYPES; i++) {
				prev_object =
				    object->common_notify.notify_list[i];
				while (prev_object) {
					next_object =
					    prev_object->notify.next[i];
					acpi_ut_update_ref_count(prev_object,
								 action);
					prev_object = next_object;
				}
			}
L
Linus Torvalds 已提交
524 525 526 527
			break;

		case ACPI_TYPE_PACKAGE:
			/*
528 529
			 * We must update all the sub-objects of the package,
			 * each of whom may have their own sub-objects.
L
Linus Torvalds 已提交
530 531 532
			 */
			for (i = 0; i < object->package.count; i++) {
				/*
533 534
				 * Null package elements are legal and can be simply
				 * ignored.
L
Linus Torvalds 已提交
535
				 */
536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565
				next_object = object->package.elements[i];
				if (!next_object) {
					continue;
				}

				switch (next_object->common.type) {
				case ACPI_TYPE_INTEGER:
				case ACPI_TYPE_STRING:
				case ACPI_TYPE_BUFFER:
					/*
					 * For these very simple sub-objects, we can just
					 * update the reference count here and continue.
					 * Greatly increases performance of this operation.
					 */
					acpi_ut_update_ref_count(next_object,
								 action);
					break;

				default:
					/*
					 * For complex sub-objects, push them onto the stack
					 * for later processing (this eliminates recursion.)
					 */
					status =
					    acpi_ut_create_update_state_and_push
					    (next_object, action, &state_list);
					if (ACPI_FAILURE(status)) {
						goto error_exit;
					}
					break;
L
Linus Torvalds 已提交
566 567
				}
			}
568
			next_object = NULL;
L
Linus Torvalds 已提交
569 570 571 572
			break;

		case ACPI_TYPE_BUFFER_FIELD:

573
			next_object = object->buffer_field.buffer_obj;
L
Linus Torvalds 已提交
574 575 576 577
			break;

		case ACPI_TYPE_LOCAL_REGION_FIELD:

578 579
			next_object = object->field.region_obj;
			break;
L
Linus Torvalds 已提交
580 581 582

		case ACPI_TYPE_LOCAL_BANK_FIELD:

583
			next_object = object->bank_field.bank_obj;
L
Len Brown 已提交
584 585 586 587 588 589 590
			status =
			    acpi_ut_create_update_state_and_push(object->
								 bank_field.
								 region_obj,
								 action,
								 &state_list);
			if (ACPI_FAILURE(status)) {
L
Linus Torvalds 已提交
591 592 593 594 595 596
				goto error_exit;
			}
			break;

		case ACPI_TYPE_LOCAL_INDEX_FIELD:

597
			next_object = object->index_field.index_obj;
L
Len Brown 已提交
598 599 600 601 602 603 604
			status =
			    acpi_ut_create_update_state_and_push(object->
								 index_field.
								 data_obj,
								 action,
								 &state_list);
			if (ACPI_FAILURE(status)) {
L
Linus Torvalds 已提交
605 606 607 608 609 610
				goto error_exit;
			}
			break;

		case ACPI_TYPE_LOCAL_REFERENCE:
			/*
611 612 613
			 * The target of an Index (a package, string, or buffer) or a named
			 * reference must track changes to the ref count of the index or
			 * target object.
L
Linus Torvalds 已提交
614
			 */
615 616
			if ((object->reference.class == ACPI_REFCLASS_INDEX) ||
			    (object->reference.class == ACPI_REFCLASS_NAME)) {
617
				next_object = object->reference.object;
L
Linus Torvalds 已提交
618 619 620 621 622
			}
			break;

		case ACPI_TYPE_REGION:
		default:
B
Bob Moore 已提交
623
			break;	/* No subobjects for all other types */
L
Linus Torvalds 已提交
624 625 626
		}

		/*
B
Bob Moore 已提交
627
		 * Now we can update the count in the main object. This can only
L
Linus Torvalds 已提交
628 629 630
		 * happen after we update the sub-objects in case this causes the
		 * main object to be deleted.
		 */
L
Len Brown 已提交
631
		acpi_ut_update_ref_count(object, action);
632
		object = NULL;
L
Linus Torvalds 已提交
633 634 635

		/* Move on to the next object to be updated */

636 637 638
		if (next_object) {
			object = next_object;
			next_object = NULL;
L
Len Brown 已提交
639 640
		} else if (state_list) {
			state = acpi_ut_pop_generic_state(&state_list);
641
			object = state->update.object;
L
Len Brown 已提交
642
			acpi_ut_delete_generic_state(state);
643
		}
L
Linus Torvalds 已提交
644 645
	}

646
	return (AE_OK);
L
Linus Torvalds 已提交
647

L
Len Brown 已提交
648
      error_exit:
L
Linus Torvalds 已提交
649

B
Bob Moore 已提交
650 651
	ACPI_EXCEPTION((AE_INFO, status,
			"Could not update object reference count"));
L
Linus Torvalds 已提交
652

653 654 655 656 657 658 659
	/* Free any stacked Update State objects */

	while (state_list) {
		state = acpi_ut_pop_generic_state(&state_list);
		acpi_ut_delete_generic_state(state);
	}

660
	return (status);
L
Linus Torvalds 已提交
661 662 663 664 665 666
}

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_add_reference
 *
667
 * PARAMETERS:  object          - Object whose reference count is to be
R
Robert Moore 已提交
668
 *                                incremented
L
Linus Torvalds 已提交
669 670 671 672 673 674 675
 *
 * RETURN:      None
 *
 * DESCRIPTION: Add one reference to an ACPI object
 *
 ******************************************************************************/

L
Len Brown 已提交
676
void acpi_ut_add_reference(union acpi_operand_object *object)
L
Linus Torvalds 已提交
677 678
{

679
	ACPI_FUNCTION_NAME(ut_add_reference);
L
Linus Torvalds 已提交
680 681 682

	/* Ensure that we have a valid object */

L
Len Brown 已提交
683
	if (!acpi_ut_valid_internal_object(object)) {
684
		return;
L
Linus Torvalds 已提交
685 686
	}

L
Len Brown 已提交
687 688 689
	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
			  "Obj %p Current Refs=%X [To Be Incremented]\n",
			  object, object->common.reference_count));
L
Linus Torvalds 已提交
690 691 692

	/* Increment the reference count */

L
Len Brown 已提交
693
	(void)acpi_ut_update_object_reference(object, REF_INCREMENT);
694
	return;
L
Linus Torvalds 已提交
695 696 697 698 699 700
}

/*******************************************************************************
 *
 * FUNCTION:    acpi_ut_remove_reference
 *
701
 * PARAMETERS:  object         - Object whose ref count will be decremented
L
Linus Torvalds 已提交
702 703 704 705 706 707 708
 *
 * RETURN:      None
 *
 * DESCRIPTION: Decrement the reference count of an ACPI internal object
 *
 ******************************************************************************/

L
Len Brown 已提交
709
void acpi_ut_remove_reference(union acpi_operand_object *object)
L
Linus Torvalds 已提交
710 711
{

712
	ACPI_FUNCTION_NAME(ut_remove_reference);
L
Linus Torvalds 已提交
713 714

	/*
B
Bob Moore 已提交
715 716
	 * Allow a NULL pointer to be passed in, just ignore it. This saves
	 * each caller from having to check. Also, ignore NS nodes.
L
Linus Torvalds 已提交
717 718 719
	 *
	 */
	if (!object ||
L
Len Brown 已提交
720
	    (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED)) {
721
		return;
L
Linus Torvalds 已提交
722 723 724 725
	}

	/* Ensure that we have a valid object */

L
Len Brown 已提交
726
	if (!acpi_ut_valid_internal_object(object)) {
727
		return;
L
Linus Torvalds 已提交
728 729
	}

L
Len Brown 已提交
730 731 732
	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
			  "Obj %p Current Refs=%X [To Be Decremented]\n",
			  object, object->common.reference_count));
L
Linus Torvalds 已提交
733 734 735

	/*
	 * Decrement the reference count, and only actually delete the object
B
Bob Moore 已提交
736
	 * if the reference count becomes 0. (Must also decrement the ref count
L
Linus Torvalds 已提交
737 738
	 * of all subobjects!)
	 */
L
Len Brown 已提交
739
	(void)acpi_ut_update_object_reference(object, REF_DECREMENT);
740
	return;
L
Linus Torvalds 已提交
741
}