From 939b432d02d70b51f4c493b4539d70fc76b85817 Mon Sep 17 00:00:00 2001 From: dg Date: Wed, 18 Nov 1998 09:00:47 +0000 Subject: Closed a very narrow and rare race condition that involved net interrupts, bio interrupts, and a truncated file that along with the precise alignment of the planets could result in a page being freed multiple times or a just-freed page being put onto the inactive queue. --- sys/kern/uipc_syscalls.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'sys/kern/uipc_syscalls.c') diff --git a/sys/kern/uipc_syscalls.c b/sys/kern/uipc_syscalls.c index a35931e..a857710 100644 --- a/sys/kern/uipc_syscalls.c +++ b/sys/kern/uipc_syscalls.c @@ -34,7 +34,7 @@ * SUCH DAMAGE. * * @(#)uipc_syscalls.c 8.4 (Berkeley) 2/21/94 - * $Id: uipc_syscalls.c,v 1.44 1998/11/14 23:36:17 dg Exp $ + * $Id: uipc_syscalls.c,v 1.45 1998/11/15 16:55:09 dg Exp $ */ #include "opt_compat.h" @@ -1366,6 +1366,7 @@ sf_buf_free(caddr_t addr, u_int size) { struct sf_buf *sf; struct vm_page *m; + int s; sf = dtosf(addr); if (sf->refcnt == 0) @@ -1374,6 +1375,7 @@ sf_buf_free(caddr_t addr, u_int size) if (sf->refcnt == 0) { pmap_qremove((vm_offset_t)addr, 1); m = sf->m; + s = splvm(); vm_page_unwire(m, 0); /* * Check for the object going away on us. This can @@ -1382,6 +1384,7 @@ sf_buf_free(caddr_t addr, u_int size) */ if (m->wire_count == 0 && m->object == NULL) vm_page_free(m); + splx(s); sf->m = NULL; SLIST_INSERT_HEAD(&sf_freelist, sf, free_list); if (sf_buf_alloc_want) { -- cgit v1.1