Hello! There is a place where the reference count of scsi_host_cmd_pool is incremented without acquiring host_cmd_pool_mutex.
Signed-off-by: Akinobu Mita <[EMAIL PROTECTED]> --- 2.6-mm/drivers/scsi/scsi.c.orig 2005-01-20 22:40:20.000000000 +0900 +++ 2.6-mm/drivers/scsi/scsi.c 2005-01-20 22:41:16.000000000 +0900 @@ -360,9 +360,9 @@ int scsi_setup_command_freelist(struct S return 0; fail2: + down(&host_cmd_pool_mutex); if (!--pool->users) kmem_cache_destroy(pool->slab); - return -ENOMEM; fail: up(&host_cmd_pool_mutex); return -ENOMEM; - To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html