Functions that are exported using EXPORT_SYMBOL, and thus are presumably freely available for use in dynamically loaded modules, do not seem to very often check the validity of their inputs. For a simple example, the following code from arch/arm/mach-realview/clock.c does not even check that clk is not NULL: unsigned long clk_get_rate(struct clk *clk) { return clk->rate; } EXPORT_SYMBOL(clk_get_rate); Is this a problem? julia -- To unsubscribe from this list: send the line "unsubscribe kernel-janitors" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html