diff options
author | kib <kib@FreeBSD.org> | 2012-09-22 12:17:09 +0000 |
---|---|---|
committer | kib <kib@FreeBSD.org> | 2012-09-22 12:17:09 +0000 |
commit | a46afff790054d383552fef4f8494908ff05d504 (patch) | |
tree | 9b4579e4aa58e7711d09fe0c5ab0307425da060c /usr.bin | |
parent | ab6639fea0be0b5523a77127e0f9f567d5ede818 (diff) | |
download | FreeBSD-src-a46afff790054d383552fef4f8494908ff05d504.zip FreeBSD-src-a46afff790054d383552fef4f8494908ff05d504.tar.gz |
Do not skip two elements of the tid_buffer when reusing the buffer
slot. This eventually results in exhaustion of the tid space, causing
new threads get tid -1 as identifier.
The bad effect of having the thread id equal to -1 is that
UMTX_OP_UMUTEX_WAIT returns EFAULT for a lock owned by such thread,
because casuword cannot distinguish between literal value -1 read from
the address and -1 returned as an indication of faulted
access. _thr_umutex_lock() helper from libthr does not check for
errors from _umtx_op_err(2), causing an infinite loop in
mutex_lock_sleep().
We observed the JVM processes hanging and consuming enormous amount of
system time on machines with approximately 100 days uptime.
Reported by: Mykola Dzham <freebsd levsha org ua>
MFC after: 1 week
Diffstat (limited to 'usr.bin')
0 files changed, 0 insertions, 0 deletions