[PATCH] smc91x: plug race between TX tasklet and driver reset
authorNicolas Pitre <nico@cam.org>
Mon, 20 Jun 2005 03:56:21 +0000 (23:56 -0400)
committerJeff Garzik <jgarzik@pobox.com>
Mon, 27 Jun 2005 04:40:33 +0000 (00:40 -0400)
commitbe83668a253149d99085ca4afe6cd8dc8a43fcd0
tree8a70198e809a6f0abd70031d3f2d6d7460e76d4f
parented4030d114efff53e2605ea4d07d39835b68b605
[PATCH] smc91x: plug race between TX tasklet and driver reset

The race causes a kernel oops when smc_hardware_send_pkt() tries to
dereference pending_tx_skb which would have been freed from one of the
driver reset paths just after the tx_task tasklet has been scheduled.
This race is possible on SMP but was uncovered by the kernel RT work.

Signed-off-by: Nicolas Pitre <nico@cam.org>
drivers/net/smc91x.c