fix aio+kq... I've been running ambrisko's test program for much longer

w/o problems than I was before...  This simply brings back the knote_delete
as knlist_delete which will also drop the knote's, instead of just clearing
the list and seeing _ONESHOT...

Fix a race where if a note was _INFLUX and _DETACHED, it could end up being
modified... whoopse..

MFC after:	1 week
Prodded by:	ambrisko and dwhite

1 files changed, 11 insertions, 8 deletions

diff --git a/sys/kern/kern_event.c b/sys/kern/kern_event.c
index 997962a..ee0ee82 100644
--- a/sys/kern/kern_event.c
+++ b/sys/kern/kern_event.c
@@ -1630,7 +1630,7 @@ knlist_destroy(struct knlist *knl)
  * knotes time to "settle".
  */
 void
-knlist_clear(struct knlist *knl, int islocked)
+knlist_cleardel(struct knlist *knl, struct thread *td, int islocked, int killkn)
 {
 	struct knote *kn;
 	struct kqueue *kq;
@@ -1646,15 +1646,20 @@ again:		/* need to reaquire lock since we have dropped it */
 	SLIST_FOREACH(kn, &knl->kl_list, kn_selnext) {
 		kq = kn->kn_kq;
 		KQ_LOCK(kq);
-		if ((kn->kn_status & KN_INFLUX) &&
-		    (kn->kn_status & KN_DETACHED) != KN_DETACHED) {
+		if ((kn->kn_status & KN_INFLUX)) {
 			KQ_UNLOCK(kq);
 			continue;
 		}
-		/* Make sure cleared knotes disappear soon */
-		kn->kn_flags |= (EV_EOF | EV_ONESHOT);
 		knlist_remove_kq(knl, kn, 1, 1);
-		KQ_UNLOCK(kq);
+		if (killkn) {
+			kn->kn_status |= KN_INFLUX | KN_DETACHED;
+			KQ_UNLOCK(kq);
+			knote_drop(kn, td);
+		} else {
+			/* Make sure cleared knotes disappear soon */
+			kn->kn_flags |= (EV_EOF | EV_ONESHOT);
+			KQ_UNLOCK(kq);
+		}
 		kq = NULL;
 	}
 
@@ -1672,8 +1677,6 @@ again:		/* need to reaquire lock since we have dropped it */
 		goto again;
 	}
 
-	SLIST_INIT(&knl->kl_list);
-
 	if (islocked)
 		mtx_assert(knl->kl_lock, MA_OWNED);
 	else {