On Fri, Jan 04, 2002 at 12:38:36AM +0100, Peter Osterlund wrote:
> Hi!
> 
> When trying to write to a bad CDRW disk in my USB CDRW unit, I got an
> oops in the usb subsystem. The oops was caused by passing junk to
> kfree in usb_destroy_configuration, line 1765. The as->extra field
> apparently contained junk.

First off, the usb-storage driver doesn't seem to work properly in
2.5.2-pre6 due to the bio and scsi changes happening.  Have you got it
to work?

> I think this is caused by a race in usb_parse_interface.
> interface->num_altsetting is incremented before the corresponding
> altsetting[] data has been initialized. If an interrupt occurs in
> between, and the interrupt causes the device to be removed, bad things
> will happen.

I don't see how that can happen, as this code only runs when the device
is first plugged in (from what I can tell.)  usb_destroy_configuration()
seems to be called much later.  Can you enable debugging in the
usb-storage driver and see if that shows anything?

thanks,

greg k-h

_______________________________________________
[EMAIL PROTECTED]
To unsubscribe, use the last form field at:
https://lists.sourceforge.net/lists/listinfo/linux-usb-devel

Reply via email to