Date: Thu, 26 Jan 2012 17:35:20 +0100 From: "Bernhard Schmidt" <bschmidt@techwires.net> To: "Adrian Chadd" <adrian@freebsd.org> Cc: PseudoCylon <moonlightakkiy@yahoo.ca>, freebsd-wireless@freebsd.org Subject: Re: net80211 race conditions seen in -HEAD Message-ID: <CAAgh0_Z9P_Gy20F+8EgpRQtp3hs5BNUVUiqbeHnbqb+xpQJu+Q@mail.gmail.com> In-Reply-To: <CAJ-Vmo=tv0oHrsG834YdS32j+6+Ae-Co9142Diox6SS6usL24w@mail.gmail.com> References: <CAFZ_MY+ifiXc3iPfDEuWNHyr7JvhuG55uzp3BTmCO2Ek2G1LOg@mail.gmail.com> <CAJ-VmomReMTTDQ3KYjbRTb4+LY+KVtkba_T0fwM49oHakW_XSg@mail.gmail.com> <CAJ-Vmo=tv0oHrsG834YdS32j+6+Ae-Co9142Diox6SS6usL24w@mail.gmail.com>
index | next in thread | previous in thread | raw e-mail
On Wed, Jan 25, 2012 at 22:47, Adrian Chadd <adrian@freebsd.org> wrote: > .. whilst the refcount is 1, so ieee80211_ref_node() may not increment the > counter before it's freed by another thread. You know, that is an inline function, what "lifetime" are we taking about? iv_bss has other issues, being overwritten while some task is using it no matter how high the refcount is is once of those. -- Bernhardhome | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAAgh0_Z9P_Gy20F+8EgpRQtp3hs5BNUVUiqbeHnbqb+xpQJu+Q>