> Methink I found the sucker - we have one place where the unix_socket
> is freed without kernel_lock hold. It is in unix_destroy_timer().
Stop, stop, stop! To the time, when socket is destroyed from timer,
it is dead. It is detached from hash tables, its queues are already destroyed
etc. It is hold only to tell peer, that endpoint is dead and to die in piece.
Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/