[openib-general] Re: ipoib oops

[Roland Dreier]

    Michael> so apparently the problem is in accessing
    Michael> mcast->mcmember.mlid.

    Michael> And I wander: what prevents the mcast object from being
    Michael> destroyed while a completion is outstanding?

Hmm, I'm not sure that the problem is use-after-free.  The oops is a
null pointer dereference, which would seem to indicate that
ipoib_mcast_join_finish() is being called with mcast == NULL.  I don't
see immediately what is causing that, though.

 - R.