Re: "refcount_t: underflow; use-after-free" when removing a SD card

Linus Walleij
2017-06-13T09:00:23Z

On Tue, Jun 13, 2017 at 12:05 AM, Heiner Kallweit <hkallweit1@gmail.com> wrote:

>> Mentioned commit added a call to blk_cleanup_queue to mmc_cleanup_queue.
>> Now blk_cleanup_queue is called twice and I'm not sure whether this is correct.
>>
> By the way: Removing the new call to blk_cleanup_queue in mmc_cleanup_queue
> fixed the issue for me, but whether this is the correct fix I can't tell.

It's the right fix.

I sent a patch with your Reported-by.

Thanks a lot for reporting this (and suggesting the fix).

Yours,
Linus Walleij