Commit 93bd249f authored by Andrew Morton's avatar Andrew Morton Committed by Linus Torvalds

[PATCH] aic7xxx timer deletion fix

From: Zwane Mwaikambo <zwane@linuxpower.ca>

ahc_linux_free_device() needs to use del_timer_sync().  slab corruption has
been observed due to the timer handler running after the containing object
was freed.
parent 98c20bf4
...@@ -4097,7 +4097,7 @@ ahc_linux_free_device(struct ahc_softc *ahc, struct ahc_linux_device *dev) ...@@ -4097,7 +4097,7 @@ ahc_linux_free_device(struct ahc_softc *ahc, struct ahc_linux_device *dev)
{ {
struct ahc_linux_target *targ; struct ahc_linux_target *targ;
del_timer(&dev->timer); del_timer_sync(&dev->timer);
targ = dev->target; targ = dev->target;
targ->devices[dev->lun] = NULL; targ->devices[dev->lun] = NULL;
free(dev, M_DEVBUF); free(dev, M_DEVBUF);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment