| commit | be83668a253149d99085ca4afe6cd8dc8a43fcd0 | |
| author | Nicolas Pitre <nico@cam.org> | |
| Mon, 20 Jun 2005 03:56:21 +0000 (19 23:56 -0400) | ||
| committer | Jeff Garzik <jgarzik@pobox.com> | |
| Mon, 27 Jun 2005 04:40:33 +0000 (27 00:40 -0400) | ||
| tree | 8a70198e809a6f0abd70031d3f2d6d7460e76d4f | treesnapshot (tar.gz zip) |
| parent | ed4030d114efff53e2605ea4d07d39835b68b605 | commitdiff |
[PATCH] smc91x: plug race between TX tasklet and driver reset
The race causes a kernel oops when smc_hardware_send_pkt() tries to
dereference pending_tx_skb which would have been freed from one of the
driver reset paths just after the tx_task tasklet has been scheduled.
This race is possible on SMP but was uncovered by the kernel RT work.
Signed-off-by: Nicolas Pitre <nico@cam.org>
The race causes a kernel oops when smc_hardware_send_pkt() tries to
dereference pending_tx_skb which would have been freed from one of the
driver reset paths just after the tx_task tasklet has been scheduled.
This race is possible on SMP but was uncovered by the kernel RT work.
Signed-off-by: Nicolas Pitre <nico@cam.org>
| drivers/net/smc91x.c | diffblobblamehistory |