From owner-freebsd-usb@FreeBSD.ORG Sat Nov 13 00:27:15 2004 Return-Path: Delivered-To: freebsd-usb@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5C16216A4CE; Sat, 13 Nov 2004 00:27:15 +0000 (GMT) Received: from mail.vicor-nb.com (bigwoop.vicor-nb.com [208.206.78.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4AA4F43D48; Sat, 13 Nov 2004 00:27:15 +0000 (GMT) (envelope-from julian@elischer.org) Received: from elischer.org (julian.vicor-nb.com [208.206.78.97]) by mail.vicor-nb.com (Postfix) with ESMTP id 2B4857A41E; Fri, 12 Nov 2004 16:27:15 -0800 (PST) Message-ID: <419554E2.5060104@elischer.org> Date: Fri, 12 Nov 2004 16:27:14 -0800 From: Julian Elischer User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3.1) Gecko/20030516 X-Accept-Language: en, hu MIME-Version: 1.0 To: usb@freebsd.org, peter@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: race condition in ehci/USB code.. X-BeenThere: freebsd-usb@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: FreeBSD support for USB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Nov 2004 00:27:15 -0000 I just found a case where the ehci hardware is writing data back into a buffer that has been put back on the free list. I assume that there was a timeout on the command, but the trasaction was never cancelled.. (or we a re part way through cancelling it). Ian, was this fixed in your timeout changes you just reverted? Does anyone else have any domain knowldge on this stuff?