I don't understanding this code: 1) for echo "scsi add-single-device 0 1 2 3" > /proc/scsi/scsi, is this only for parallel scsi? I thought most modern busses (usb, sata, FC, firewire, etc) dynamically assign these numbers and just use them as a unique identifier ala kdev_t. How would this work on one of the other devices? 2) How do you trigger this? /proc/scsi/scsi is read only even for root. 3) This bit is repeated in both the add and remove logic: p = buffer + 23; host = simple_strtoul(p, &p, 0); channel = simple_strtoul(p + 1, &p, 0); id = simple_strtoul(p + 1, &p, 0); lun = simple_strtoul(p + 1, &p, 0); So what happens if you echo "scsi add-single-device 0" > /proc/scsi/scsi (or wherever file would trigger this function) so the read for channel skips over the null terminator (I'm assuming there is one) and reads who knows what? Or what if instead of ending that with one 0, you end it with enough zeroes to pad right up to PAGE_SIZE, so it reads the next page? (I don't even know what the page protections are on that, depends how __get_free_page(GFP_KERNEL) works...) Confused, Rob -- "One of my most productive days was throwing away 1000 lines of code." - Ken Thompson. - To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html