On Fri, 2009-08-21 at 10:23 +0100, Chris Webb wrote: > Chris Webb <chris@xxxxxxxxxxxx> writes: > > > Reading through the disassembled code and comparing by hand against > > disk_part_iter_next(), I think that might be line 144 of block/genhd.c, > > where the ptbl->len dereference happens. > > Sorry to follow up a third time, but I can now confirm this. I slipped -g into > CFLAGS in the kernel Makefile and rebuilt genhd.o and then the entire vmlinux. I suppose it makes sense: That was the only dereference at offset 16 I could find in the code. The thing which doesn't quite make sense is that disk_part_iter_init() also dereferences the same pointer successfully ... I suppose this could be a race with another thread to null out the gendisk part_tbl ... I'll have to think about it some more. Thanks for the detective work, James -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html