[ofa-general] Re: Dereferencing freed memory bugs

[Roland Dreier]

> > drivers/infiniband/hw/nes/nes_cm.c +621 nes_cm_timer_tick(179) 'cm_node'

 > I believe Dan did run his tool against 2.6.29 source.  We are
 > looking into the two warnings.  Current thinking is we did
 > introduce a couple of errors with the recent CM changes.

Hmm, maybe I'm not reading the results correctly -- for example, in the
latest git tree, line 621 of nes_cm.c is:

			nes_debug(NES_DBG_CM, "Retransmitting send_entry %p "
				"for node %p, jiffies = %lu, time to send = "
				"%lu, retranscount = %u, send_entry->seq_num = "
				"0x%08X, cm_node->tcp_cntxt.rem_ack_num = "
				"0x%08X\n", send_entry, cm_node, jiffies,
				send_entry->timetosend,
 = 621 =>			send_entry->retranscount,
				send_entry->seq_num,
				cm_node->tcp_cntxt.rem_ack_num);

or is 621 not the line number?

 - R.