On Thu, Jun 21, 2018 at 07:08:20PM +0100, Dmitry Safonov wrote: > find_iova() looks to be using a bad locking practice: it locks the > returned iova only for the search time. And looking in code, the > element can be removed from the tree and freed under rbtree lock. That > happens during memory hot-unplug and cleanup on module removal. Here > I cleanup users of the function and delete it.
But this is only a problem if more than one code-path uses tries to handle a given iova at the same time, no? Regards, Joerg _______________________________________________ iommu mailing list iommu@lists.linux-foundation.org https://lists.linuxfoundation.org/mailman/listinfo/iommu