From: Eric Dumazet <redacted>
Date: Thu, 29 Oct 2009 06:59:41 +0100

David, what do you think of following patch ?

I wonder if we should reorganize code to add sanity checks in tcp_unlink_write_queue()
that the skb we delete from queue is not still referenced.

[PATCH] tcp: clear retrans hints in tcp_send_synack()

There is a small possibility the skb we unlink from write queue 
is still referenced by retrans hints.

Signed-off-by: Eric Dumazet <redacted>

Yes, the first thing I thought of when I saw this crash was the hints.

I'll think this over.