From owner-freebsd-commit Wed Jun 7 00:25:15 1995 Return-Path: commit-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id AAA05494 for commit-outgoing; Wed, 7 Jun 1995 00:25:15 -0700 Received: (from majordom@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id AAA05480 for cvs-sys-outgoing; Wed, 7 Jun 1995 00:25:13 -0700 Received: (from davidg@localhost) by freefall.cdrom.com (8.6.10/8.6.6) id AAA05469 ; Wed, 7 Jun 1995 00:25:11 -0700 Date: Wed, 7 Jun 1995 00:25:11 -0700 From: David Greenman Message-Id: <199506070725.AAA05469@freefall.cdrom.com> To: CVS-commiters, cvs-sys Subject: cvs commit: src/sys/nfs nfs_serv.c Sender: commit-owner@FreeBSD.org Precedence: bulk davidg 95/06/07 00:25:11 Modified: sys/nfs nfs_serv.c Log: Backed out one part of rev 1.13. In this one case, two references to the vnode are gained, but only one reference to the object is gained. The object reference is (correctly) lost by the nfsrv_vrele() at the exit point of the nfsrv_link function. The bug is easily seen by doing a standard "link" operation to a 2.0.5 server (ln foo bar). The system will immediately panic with "object deallocated too many times". This fixes the panic reported today by ohki@gssm.otsuka.tsukuba.ac.jp. (will be) Reviewed by: John Dyson