When a driver module is unloaded and the last still open file is a raw
MIDI device, the card and its devices will be actually freed in the
snd_card_file_remove() call when that file is closed. Afterwards, rmidi
and rmidi->card point into freed memory, so the module pointer is likely
to be garbage.
(This was introduced by commit 9a1b64caac.)
Signed-off-by: Clemens Ladisch <[email protected]>
Reported-by: Krzysztof Foltman <[email protected]>
Cc: 2.6.30-2.6.35 <[email protected]>
Signed-off-by: Takashi Iwai <[email protected]>