cvs commit: src/sys/kern tty.c

Konstantin Belousov kib at
Fri May 30 11:13:30 UTC 2008

kib         2008-05-30 11:13:30 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/kern             tty.c 
  MFC rev. 1.280:
  Rev. 1.274 put the ttyrel() call before the destroy_dev() in the
  ttyfree(), freeing the tty. Since destroy_dev() may call d_purge()
  cdevsw method, that is the ttypurge() for the tty, the code ends up
  accessing freed tty structure.
  Put the ttyrel() after destroy_dev() in the ttyfree. To prevent the
  panic the rev. 1.274 provided fix for, check the TS_GONE in sysctl
  handler and refuse to provide information on such tty.
  Revision   Changes    Path  +5 -2      src/sys/kern/tty.c

More information about the cvs-src mailing list