On Sun, Mar 30, 2008 at 07:38:51PM +0200, Bernard Pidoux wrote: ...Yes, if it's only like this, it's OK. No problem! Patch #3 added to "sk_ax25_debug =" sk->sk_family as the 2nd number, and 11 according to include/linux/socket.h means AF_ROSE. sock_def_write() function in net/core/sock.c where the OOPs triggered runs some cleaning on sockets when their skbs are kfreed, but this shouldn't be done after socket had been closed (sock_orphan() removes some pointers). When ROSE sends it's skbs with ax25_send_frame(), they are added to AX25 queues, and kfreed after transmitting. If it's after ROSE socket had been released, but not properly updated, the cleaning is done on kfreed memory not used by the socket anymore. Cheers, Jarek P. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
| Dave Hansen | Re: [RFC/PATCH] Documentation of kernel messages |
| Bart Van Assche | Integration of SCST in the mainstream Linux kernel |
| Amit K. Arora | [RFC] Heads up on sys_fallocate() |
| David Newall | Re: Slow DOWN, please!!! |
git: | |
| Gerrit Renker | [PATCH 27/37] dccp: Integration of dynamic feature activation - part 2 (server side) |
| Corey Minyard | [PATCH 3/3] Convert the UDP hash lock to RCU |
| Frans Pop | svc: failed to register lockdv1 RPC service (errno 97). |
| Jarek Poplawski | [PATCH] pkt_sched: Destroy gen estimators under rtnl_lock(). |
