[ofa-general] [PATCH 2.6.27] ib/cm: free cm_device structure

Roland Dreier rdreier at cisco.com
Mon Aug 25 13:33:01 PDT 2008


 >         device_unregister(cm_dev->device);
 > +       kfree(cm_dev);

Is this really correct?  Couldn't something (eg an open file from sysfs)
still have a reference to cm_dev->device even after device_unregister()
returns, in which case this ends up freeing an object that's still live?



More information about the general mailing list