[Bug 292884] nfsd causes kernel panic

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292884

--- Comment #10 from Mark Johnston <markj@FreeBSD.org> ---
So the xptr is still live.  And, in the socket we can see that the socket
buffer upcall is still configured, i.e., nothing called soupcall_clear().

The kernel gets the socket from userspace; it clears f_data and f_ops in the
file handle referencing the socket, so the xprt effectively inherits the file
descriptor's socket reference.  That looks a bit dodgy but I don't see any
obvious problems, and I can't otherwise see how the socket reference could be
lost.

I wonder if Rick's suggestion in comment 5 will help.  I missed that he is
planning to post a patch, I guess he sees something that I do not. :)

-- 
You are receiving this mail because:
You are the assignee for the bug.