Re: Random memory corruption of fe[1]->dvb pointer

2014-12-02 Thread Benjamin Larsson
On 2014-12-02 11:59, Antti Palosaari wrote: [...] So the solution is to change rtl2832.c to the I2C model? And does this issue only affect the mn8847x drivers ? It likely affects some other dvb-usb-v2 drivers too. But not af9035 as I fixed it initially there I think. If this is the case wo

Re: Random memory corruption of fe[1]->dvb pointer

2014-12-02 Thread Antti Palosaari
On 12/02/2014 12:41 PM, Benjamin Larsson wrote: On 2014-12-02 11:02, Antti Palosaari wrote: On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affec

Re: Random memory corruption of fe[1]->dvb pointer

2014-12-02 Thread Benjamin Larsson
On 2014-12-02 11:02, Antti Palosaari wrote: On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affected frontend should be enough. I tried that for t

Re: Random memory corruption of fe[1]->dvb pointer

2014-12-02 Thread Antti Palosaari
On 12/02/2014 11:47 AM, Akihiro TSUKADA wrote: So at first it would be nice if someone could confirm my findings. Applying the same kind of code like my patch and unplug something that uses the affected frontend should be enough. I tried that for tc90522, and I could remove earth-pt3 (which u

Re: Random memory corruption of fe[1]->dvb pointer

2014-12-02 Thread Akihiro TSUKADA
> So at first it would be nice if someone could confirm my findings. > Applying the same kind of code like my patch and unplug something that > uses the affected frontend should be enough. I tried that for tc90522, and I could remove earth-pt3 (which uses tc90522), tc90522 and tuner modules withou

Re: Random memory corruption of fe[1]->dvb pointer

2014-12-01 Thread Benjamin Larsson
I think I have found the issue for this error and it looks like a use after free that affects multiple drivers. The effect is that the driver crashes on unload. I added the following code to the mn88472 driver, it should behave as a nop: diff --git a/drivers/staging/media/mn88472/mn88472.c b/