tree 988674bee82e2e7f94a258066899e2e0408cf3eb
parent 03feee373f05d5c500dd6198015de83005df902c
author Al Viro <viro@zeniv.linux.org.uk> 1366057873 -0400
committer Al Viro <viro@zeniv.linux.org.uk> 1367264507 -0400

mISDN: fix the races with timers going off just as they are deleted

timer callback in timerdev.c both accesses struct mISDNtimer it's
called for *and* moves it to dev->expired.  We need del_timer_sync(),
or we risk kfree() freeing it right under dev_expire_timer() *and*
dev->expired getting corrupted.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>