WITNESS & RELENG_6

[Eugene Grosbein]

On Thu, Jan 04, 2007 at 12:37:08PM +0200, Kostik Belousov wrote:

> The problem is revealed by INVARIANTS option, not by WITNESS, and is definitely the use-after-free.
> 
> in src/nvidia_dev.c, nvidia_dev_close(), that is cdevsw.d_close proc,
> the destroy_dev() is called. Please, apply rev. 1.199 of sys/kern/kern_conf.c.
> I expect that crashes shall stop, but non-killable processes (in the "devdrn")
> state would accumulate.
> 
> Please, confirm.

I've tried to apply 1.199 to RELENG_6 but failed:
one of three chunks has been rejected.

Eugene