From owner-freebsd-bugs@FreeBSD.ORG  Mon Jan  2 18:09:10 2006
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
X-Original-To: freebsd-bugs@FreeBSD.org
Delivered-To: freebsd-bugs@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8840B16A41F;
	Mon,  2 Jan 2006 18:09:10 +0000 (GMT)
	(envelope-from vlada@devnull.cz)
Received: from smtp2.vol.cz (smtp2.vol.cz [195.250.128.75])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1F94F43D5C;
	Mon,  2 Jan 2006 18:09:10 +0000 (GMT)
	(envelope-from vlada@devnull.cz)
Received: from [10.0.3.50] (prg-v-1-245.static.adsl.vol.cz [62.177.120.245])
	by smtp2.vol.cz (Postfix) with ESMTP id 9803660ED6;
	Mon,  2 Jan 2006 19:09:08 +0100 (CET)
In-Reply-To: <20060102175622.M25718@fledge.watson.org>
References: <200601021755.k02HtrKH063366@freefall.freebsd.org>
	<20060102175622.M25718@fledge.watson.org>
Mime-Version: 1.0 (Apple Message framework v746.2)
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <570C067A-0C00-486E-AE84-CCA3F1EE3EA6@devnull.cz>
Content-Transfer-Encoding: 7bit
From: =?ISO-8859-1?Q?Vladim=EDr_Kotal?= <vlada@devnull.cz>
Date: Mon, 2 Jan 2006 19:09:08 +0100
To: Robert Watson <rwatson@FreeBSD.org>
X-Mailer: Apple Mail (2.746.2)
Cc: freebsd-bugs@FreeBSD.org
Subject: Re: kern/91224: sending file descriptors via AF_UNIX socket crashes
	kernel
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jan 2006 18:09:10 -0000


On 2.1.2006, at 18:57, Robert Watson wrote:

>
> On Mon, 2 Jan 2006, Robert Watson wrote:
>
>> Synopsis: sending file descriptors via AF_UNIX socket crashes kernel
>>
>> State-Changed-From-To: open->feedback
>> State-Changed-By: rwatson
>> State-Changed-When: Mon Jan 2 17:54:04 UTC 2006
>> State-Changed-Why:
>> On 2005/11/10, I committed a fix for a number of bugs relating to
>> transfering UNIX domain sockets to the CVS HEAD as uipc_usrreq.c: 
>> 1.159,
>> and merged these to RELENG_6 as uipc_usrreq.c:1.155.2.2.  Could you
>> try upgrading to 6-STABLE and see if you still experience this  
>> problem?
>
> You'll also want kern_descrip.c:1.284 in HEAD or kern_descrip.c: 
> 1.243.2.8 which teaches closef() about the NULL thread pointer.   
> That was merged around 2005/11/16.
>

Yes, I have noticed the MFC in closef() just after I have submitted  
the bug. I don't think the kernel panic is possible with the (td !=  
NULL) check so this bug report can be marked as closed.


v.