Hi,

there's another race I failed to see.

This shortened version of quite common code is racy:

usb_unlink_urb(u);
kfree(u);
MOD_DEC_USE_COUNT;

It would have to be:
usb_unlink_urb();
usb_wait_for_completion_handler(); //to be written
kfree(u);
MOD_DEC_USE_COUNT;

The problem is that the completion handler itself can't provide
that hypothetical function, because itself might be unloaded.

        Regards
                Oliver

_______________________________________________
[EMAIL PROTECTED]
To unsubscribe, use the last form field at:
https://lists.sourceforge.net/lists/listinfo/linux-usb-devel

Reply via email to