> FWIW, what I'm seeing there is chan_interrupt() with tty that has definitely
> been kfree'd. What happens is that we have several opened files for
> given tty and they all get closed in parallel. Now, ->release() of
> tty calls ->close() of driver (line_close() in this case) and then
> gets ar
On Wed, Aug 10, 2011 at 06:44:32PM +0100, Al Viro wrote:
> Fixed and pushed (um-header.git #master); however, looking around that area
> shows more races ;-/
Such as, for example, seriously broken handling of free_winch(): delaying
free_irq() until after return from IRQ handler is nice, but not e