On Fri, Mar 03, 2006 at 01:42:20PM -0800, Chris Leech wrote:

+void dma_async_device_unregister(struct dma_device* device)
+{

...

+	kref_put(&device->refcount, dma_async_device_cleanup);
+	wait_for_completion(&device->done);
+}

This looks like a bug: device is dereferenced after it is potentially 
freed.

		-ben
-- 
"Time is of no importance, Mr. President, only life is important."
Don't Email: [off-list ref].