On Thu, 2013-12-05 at 11:21 +0200, Eliad Peller wrote: > @@ -219,8 +221,13 @@ void ___cfg80211_scan_done(struct cfg80211_registered_device *rdev, bool leak) > * the scan request or not ... if it accesses the dev > * in there (it shouldn't anyway) then it may crash. > */ > - if (!leak) > - kfree(request); > + if (leak) { > + request->pending_cleanup = true; > + return; This seems insufficient, if the driver never indicates completion, we'd never clear rdev->scan_req? johannes -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html