Re: Random memory corruption of fe[1]-dvb pointer

2014-12-02 Thread Akihiro TSUKADA
So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affected frontend should be enough. I tried that for tc90522, and I could remove earth-pt3 (which uses tc90522), tc90522 and tuner modules without

Re: Random memory corruption of fe[1]-dvb pointer

2014-12-02 Thread Antti Palosaari
On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affected frontend should be enough. I tried that for tc90522, and I could remove earth-pt3 (which

Re: Random memory corruption of fe[1]-dvb pointer

2014-12-02 Thread Benjamin Larsson
On 2014-12-02 11:02, Antti Palosaari wrote: On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affected frontend should be enough. I tried that for

Re: Random memory corruption of fe[1]-dvb pointer

2014-12-02 Thread Antti Palosaari
On 12/02/2014 12:41 PM, Benjamin Larsson wrote: On 2014-12-02 11:02, Antti Palosaari wrote: On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the

Re: Random memory corruption of fe[1]-dvb pointer

2014-12-02 Thread Benjamin Larsson
On 2014-12-02 11:59, Antti Palosaari wrote: [...] So the solution is to change rtl2832.c to the I2C model? And does this issue only affect the mn8847x drivers ? It likely affects some other dvb-usb-v2 drivers too. But not af9035 as I fixed it initially there I think. If this is the case

Re: Random memory corruption of fe[1]-dvb pointer

2014-12-01 Thread Benjamin Larsson
I think I have found the issue for this error and it looks like a use after free that affects multiple drivers. The effect is that the driver crashes on unload. I added the following code to the mn88472 driver, it should behave as a nop: diff --git a/drivers/staging/media/mn88472/mn88472.c

Random memory corruption of fe[1]-dvb pointer

2014-11-30 Thread Benjamin Larsson
While working on a driver I noticed that I had trouble unloading the module after testing, it crashed while running dvb_usbv2_adapter_frontend_exit. So I added a print out of some pointers and got this: Init: usb 1-1: dvb_usbv2_adapter_frontend_init: adap=fe[0] 88006afa6818 usb 1-1: