Skip site navigation (1)Skip section navigation (2) 
Date:      Mon, 7 Aug 1995 17:56:18 -0700
From:      Matt Dillon <dillon@best.com>
To:        bugs@freebsd.org
Cc:        dima@blob.best.net
Subject:   Bug in unp_detach()
Message-ID:  <199508080056.RAA13312@blob.best.net>
index | next in thread | raw e-mail 

    In kern/uipc_usrreq.c, in unp_detach() the following two lines:

	    m_freem(unp->unp_addr);
	    (void) m_free(dtom(unp));

    are called BEFORE the sorflush() in the unp_rights conditional...
    basically.  The calls  should obivously go AFTER that conditional
    so the unp_addr/unp structures are not ripped out from under
    sorflush().

    (This caused a crash when I tried to use AF_LOCAL file descriptor
    passing.. in fact, it crashed about every time!).

					-Matt
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508080056.RAA13312>