[Xen-devel] [PATCH 1 of 8] blktap: Fix tap kobj double unref in sysfs_destroy

[Daniel Stodden <daniel.stodden@xxxxxxxxxx>]

It's that final put_device in device_unregister which is supposed to
clear the caller's reference. Subtle indeed, because refcount went
2->3 when after sysfs_destroy:

 +1 for our own ring->dev
 +1 for the open sysfs ./remove attribute
 +1 for the callback scheduled

Drops to 1 in device_unregister and 0 only after leaving callbacks.

Signed-off-by: Daniel Stodden <daniel.stodden@xxxxxxxxxx>

Attachment: fix-double-free.diff
Description: Text Data

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel