diff options
author | snb <snb@FreeBSD.org> | 2009-06-25 20:40:13 +0000 |
---|---|---|
committer | snb <snb@FreeBSD.org> | 2009-06-25 20:40:13 +0000 |
commit | 5d2850ae03b3aae3b966028ceb9b1b04c7093197 (patch) | |
tree | 4037e45800143a968f40328f85b61e9f3daa55bd /lib/libc/stdio/fsetpos.c | |
parent | 6d5618d67ce9b5926b533d242ff4e234e0f2a680 (diff) | |
download | FreeBSD-src-5d2850ae03b3aae3b966028ceb9b1b04c7093197.zip FreeBSD-src-5d2850ae03b3aae3b966028ceb9b1b04c7093197.tar.gz |
Fix a bug reported by pho@ where one can induce a panic by decreasing
vfs.ufs.dirhash_maxmem below the current amount of memory used by dirhash. When
ufsdirhash_build() is called with the memory in use greater than dirhash_maxmem,
it attempts to free up memory by calling ufsdirhash_recycle(). If successful in
freeing enough memory, ufsdirhash_recycle() leaves the dirhash list locked. But
at this point in ufsdirhash_build(), the list is not explicitly unlocked after
the call(s) to ufsdirhash_recycle(). When we next attempt to lock the dirhash
list, we will get a "panic: _mtx_lock_sleep: recursed on non-recursive mutex
dirhash list".
Tested by: pho
Approved by: dwmalone (mentor)
MFC after: 3 weeks
Diffstat (limited to 'lib/libc/stdio/fsetpos.c')
0 files changed, 0 insertions, 0 deletions