summaryrefslogtreecommitdiffstats
path: root/sys/kern/uipc_syscalls.c
diff options
context:
space:
mode:
authordg <dg@FreeBSD.org>1998-11-18 09:00:47 +0000
committerdg <dg@FreeBSD.org>1998-11-18 09:00:47 +0000
commit939b432d02d70b51f4c493b4539d70fc76b85817 (patch)
tree9c19c39d996b0b6fcbe33ab03ffc075886f90908 /sys/kern/uipc_syscalls.c
parentfeaedfaff603933e7dba04b2b6a7009f4251c507 (diff)
downloadFreeBSD-src-939b432d02d70b51f4c493b4539d70fc76b85817.zip
FreeBSD-src-939b432d02d70b51f4c493b4539d70fc76b85817.tar.gz
Closed a very narrow and rare race condition that involved net interrupts,
bio interrupts, and a truncated file that along with the precise alignment of the planets could result in a page being freed multiple times or a just-freed page being put onto the inactive queue.
Diffstat (limited to 'sys/kern/uipc_syscalls.c')
-rw-r--r--sys/kern/uipc_syscalls.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/kern/uipc_syscalls.c b/sys/kern/uipc_syscalls.c
index a35931e..a857710 100644
--- a/sys/kern/uipc_syscalls.c
+++ b/sys/kern/uipc_syscalls.c
@@ -34,7 +34,7 @@
* SUCH DAMAGE.
*
* @(#)uipc_syscalls.c 8.4 (Berkeley) 2/21/94
- * $Id: uipc_syscalls.c,v 1.44 1998/11/14 23:36:17 dg Exp $
+ * $Id: uipc_syscalls.c,v 1.45 1998/11/15 16:55:09 dg Exp $
*/
#include "opt_compat.h"
@@ -1366,6 +1366,7 @@ sf_buf_free(caddr_t addr, u_int size)
{
struct sf_buf *sf;
struct vm_page *m;
+ int s;
sf = dtosf(addr);
if (sf->refcnt == 0)
@@ -1374,6 +1375,7 @@ sf_buf_free(caddr_t addr, u_int size)
if (sf->refcnt == 0) {
pmap_qremove((vm_offset_t)addr, 1);
m = sf->m;
+ s = splvm();
vm_page_unwire(m, 0);
/*
* Check for the object going away on us. This can
@@ -1382,6 +1384,7 @@ sf_buf_free(caddr_t addr, u_int size)
*/
if (m->wire_count == 0 && m->object == NULL)
vm_page_free(m);
+ splx(s);
sf->m = NULL;
SLIST_INSERT_HEAD(&sf_freelist, sf, free_list);
if (sf_buf_alloc_want) {
OpenPOWER on IntegriCloud