Date: Thu, 08 Jul 2010 10:51:21 +0300 From: Andriy Gapon <avg@icyb.net.ua> To: freebsd-net@freebsd.org, Konstantin Belousov <kib@freebsd.org> Cc: Ming Fu <Ming.Fu@watchguard.com>, "Christian S.J. Peron" <csjp@freebsd.org> Subject: Re: kern/123095 kern/131602 sendfile Message-ID: <4C358379.2040404@icyb.net.ua> In-Reply-To: <4C34FFAD.6050504@icyb.net.ua> References: <7C3D15DD6E8F464998CA1470D8A322F302BB9F72@ES02CO.wgti.net> <4C34FFAD.6050504@icyb.net.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
Not an expert by any measure but the following looks suspicious: m_copy/m_copym calls mb_dupcl for M_EXT case and M_RDONLY is _not_ checked nor preserved in that case. So we may get a writable M_EXT mbuf pointing to sf_buf wrapping a page of a file. But I am not sure if/how mbufs are re-used and if we can end up actually writing something to the resulting mbuf. -- Andriy Gapon
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4C358379.2040404>