cvs commit: src/sys/kern vfs_aio.c src/sys/sys event.h

[Jean-Sebastien Pedron]

dumbbell    2008-01-28 10:26:25 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/kern             vfs_aio.c 
    sys/sys              event.h 
  Log:
  MFC:
    sys/kern/vfs_aio.c; revision 1.237
    sys/sys/event.h; revision 1.38
  
    When asked to use kqueue, AIO stores its internal state in the
    `kn_sdata' member of the newly registered knote. The problem is that
    this member is overwritten by a call to kevent(2) with the EV_ADD flag,
    targetted at the same kevent/knote. For instance, a userland application
    may set the pointer to NULL, leading to a panic.
  
    A testcase was provided by the submitter.
  
    PR:   kern/118911
    Submitted by: MOROHOSHI Akihiko <moro at remus.dti.ne.jp>
  
  Revision   Changes    Path
  1.233.2.1  +6 -4      src/sys/kern/vfs_aio.c
  1.37.2.1   +2 -0      src/sys/sys/event.h