From owner-freebsd-geom@FreeBSD.ORG  Tue Mar  2 16:35:11 2010
Return-Path: <owner-freebsd-geom@FreeBSD.ORG>
Delivered-To: freebsd-geom@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BADF81065694;
	Tue,  2 Mar 2010 16:35:11 +0000 (UTC) (envelope-from jh@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id 821D38FC2A;
	Tue,  2 Mar 2010 16:33:16 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id o22GXGuZ070429;
	Tue, 2 Mar 2010 16:33:16 GMT (envelope-from jh@freefall.freebsd.org)
Received: (from jh@localhost)
	by freefall.freebsd.org (8.14.3/8.14.3/Submit) id o22GXG1R070425;
	Tue, 2 Mar 2010 16:33:16 GMT (envelope-from jh)
Date: Tue, 2 Mar 2010 16:33:16 GMT
Message-Id: <201003021633.o22GXG1R070425@freefall.freebsd.org>
To: lolownia@gmail.com, jh@FreeBSD.org, freebsd-geom@FreeBSD.org
From: jh@FreeBSD.org
Cc: 
Subject: Re: kern/98034: [geom] dereference of NULL pointer in
	acd_geom_detach by g_event
X-BeenThere: freebsd-geom@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: GEOM-specific discussions and implementations
	<freebsd-geom.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-geom>
List-Post: <mailto:freebsd-geom@freebsd.org>
List-Help: <mailto:freebsd-geom-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-geom>,
	<mailto:freebsd-geom-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Mar 2010 16:35:11 -0000

Synopsis: [geom] dereference of NULL pointer in acd_geom_detach by g_event

State-Changed-From-To: open->closed
State-Changed-By: jh
State-Changed-When: Tue Mar 2 16:27:56 UTC 2010
State-Changed-Why: 
There are multiple problems related to acd(4) detach:

1. acd_modevent() ignored the return value from g_modevent(). This has been
   fixed in r198519 and it may actually prevent the reported panic.

2. acd(4) lacks reference counting and softc locking. (PR kern/125139)

3. There are problems with GEOM class unloading. (PR kern/139847)
   http://docs.freebsd.org/cgi/mid.cgi?20081216210311.GA5229

I am closing this PR because (1) has been fixed and there are duplicate
PRs to cover the other issues.

http://www.freebsd.org/cgi/query-pr.cgi?pr=98034