Hello!

There is a place where the reference count of scsi_host_cmd_pool is
incremented without acquiring host_cmd_pool_mutex.

Signed-off-by: Akinobu Mita <[EMAIL PROTECTED]>

--- 2.6-mm/drivers/scsi/scsi.c.orig     2005-01-20 22:40:20.000000000 +0900
+++ 2.6-mm/drivers/scsi/scsi.c  2005-01-20 22:41:16.000000000 +0900
@@ -360,9 +360,9 @@ int scsi_setup_command_freelist(struct S
        return 0;
 
  fail2:
+       down(&host_cmd_pool_mutex);
        if (!--pool->users)
                kmem_cache_destroy(pool->slab);
-       return -ENOMEM;
  fail:
        up(&host_cmd_pool_mutex);
        return -ENOMEM;


-
To unsubscribe from this list: send the line "unsubscribe linux-scsi" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to