On Wed, Jul 06, 2005 at 08:59:49PM +0300, Michael S. Tsirkin wrote:
> The current sdp_conn_put/sdp_conn_hold implementation
> seems to be subject to the following race condition:
>
> - thread A calls sdp_conn_put, atomic dec and test returns 0
> - thread B looks up the connection and calls sdp_con
The current sdp_conn_put/sdp_conn_hold implementation
seems to be subject to the following race condition:
- thread A calls sdp_conn_put, atomic dec and test returns 0
- thread B looks up the connection and calls sdp_conn_get,
incrementing the reference count back to 1
- thread A now goes on to