On Mon, 2021-01-04 at 07:51 -0800, Bart Van Assche wrote: > Hi, > > My understanding is that the ft_queue_data_in() function in the > tcm_fc driver gets called while processing SCSI READ commands. That > function queues data for sending by calling fc_seq_send(). The FCoE > driver translates that call into a dev_queue_xmit(skb) which sends > the data asynchronously. ft_queue_data_in() frees the data buffer > synchronously from inside ft_queue_status(). I believe that this race > condition can trigger data corruption. Since nobody ever reported > this race condition, does this mean that the FCoE target driver has > no users and hence that it can be removed from the kernel tree? It could just mean the race condition is so rare no user has ever triggered it reliably enough to report ... have you managed to trigger it? James
