> I believe somebody passed that around on a list before, but there are > other malloc bugs in bt code.
Oh, probably. Still, this uhci diff looks like the way to go to me (only _u_hci needs to malloc() after open_pipe() has been called, and open_pipe() is supposed to not sleep and allowed to report USBD_NOMEM). This is a genuine usb stack bug. Miod
