| commit | 51424739a9a596084144dc78197ad06b53f2f293 | |
| author | Matthew Dillon <dillon@apollo.backplane.com> | |
| Mon, 17 Oct 2016 19:15:57 +0000 (17 12:15 -0700) | ||
| committer | Matthew Dillon <dillon@apollo.backplane.com> | |
| Mon, 17 Oct 2016 19:15:57 +0000 (17 12:15 -0700) | ||
| tree | 12eb8631d10020e2cc86ed097b94dc5e0a8b0da7 | treesnapshot (tar.gz zip) |
| parent | 4a5093f732f5b3445e862ef3318d0193567985a3 | commitdiff |
kernel - Fix panic/crash in vm_object_page_remove()
* When vm_object_page_remove() is called with one page, the caller is allowed
to hold a spinlock (typically on that page). The callback is not supposed
to call user_yield in that situation.
* Fix missing initialization of info.count which could result in the callback
issuing a yield when it was not supposed to.
Reported-by: htse
* When vm_object_page_remove() is called with one page, the caller is allowed
to hold a spinlock (typically on that page). The callback is not supposed
to call user_yield in that situation.
* Fix missing initialization of info.count which could result in the callback
issuing a yield when it was not supposed to.
Reported-by: htse
| sys/vm/vm_object.c | diffblobblamehistory |