On Thu, Dec 5, 2013 at 4:31 PM, Johannes Berg <johannes@xxxxxxxxxxxxxxxx> wrote: > On Thu, 2013-12-05 at 11:21 +0200, Eliad Peller wrote: > >> @@ -219,8 +221,13 @@ void ___cfg80211_scan_done(struct cfg80211_registered_device *rdev, bool leak) >> * the scan request or not ... if it accesses the dev >> * in there (it shouldn't anyway) then it may crash. >> */ >> - if (!leak) >> - kfree(request); >> + if (leak) { >> + request->pending_cleanup = true; >> + return; > > This seems insufficient, if the driver never indicates completion, we'd > never clear rdev->scan_req? > right, but i think it somehow makes sense (i.e. the driver must indicate completion...)? Eliad. -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html