Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Aug 1997 19:11:03 +0400 (MSD)
From:      Dmitrij Tejblum <dima@tejblum.dnttm.rssi.ru>
To:        FreeBSD-gnats-submit@FreeBSD.ORG
Cc:        julian@FreeBSD.ORG
Subject:   kern/4397: DEVFS trashes memory in umount
Message-ID:  <199708261511.TAA00687@tejblum.dnttm.rssi.ru>
Resent-Message-ID: <199708261520.IAA16416@hub.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         4397
>Category:       kern
>Synopsis:       DEVFS trashes memory in umount
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Aug 26 08:20:03 PDT 1997
>Last-Modified:
>Originator:     Dmitrij Tejblum
>Organization:
>Release:        FreeBSD 3.0-CURRENT i386
>Environment:


>Description:

List of links to one device is not properly linked. This caused memory trash
when the list is destroyed.

>How-To-Repeat:

unmount DEVFS and then mount it again. You may see message 
'Data modified on freelist' printed on console.

>Fix:
	
--- devfs_tree.c.02	Tue Aug 26 00:44:04 1997
+++ devfs_tree.c	Tue Aug 26 00:51:07 1997
@@ -271,6 +271,7 @@
 		devnmp->nextlink = dnp->linklist;
 		devnmp->prevlinkp = devnmp->nextlink->prevlinkp;
 		devnmp->nextlink->prevlinkp = &(devnmp->nextlink);
+		*devnmp->prevlinkp = devnmp;
 		dnp->linklist = devnmp;
 	} else {
 		devnmp->nextlink = devnmp;

>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199708261511.TAA00687>