From owner-cvs-src@FreeBSD.ORG  Fri Oct  1 05:01:00 2004
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id E3C9916A4CE; Fri,  1 Oct 2004 05:01:00 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C206E43D5C; Fri,  1 Oct 2004 05:01:00 +0000 (GMT)
	(envelope-from das@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.11/8.12.11) with ESMTP id i91510gb086397;
	Fri, 1 Oct 2004 05:01:00 GMT
	(envelope-from das@repoman.freebsd.org)
Received: (from das@localhost)
	by repoman.freebsd.org (8.12.11/8.12.11/Submit) id i91510No086396;
	Fri, 1 Oct 2004 05:01:00 GMT
	(envelope-from das)
Message-Id: <200410010501.i91510No086396@repoman.freebsd.org>
From: David Schultz <das@FreeBSD.org>
Date: Fri, 1 Oct 2004 05:01:00 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/i386/linux linux_ptrace.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Oct 2004 05:01:01 -0000

das         2004-10-01 05:01:00 UTC

  FreeBSD src repository

  Modified files:
    sys/i386/linux       linux_ptrace.c 
  Log:
  Fix the following race:
  
    1. Process p1 is currently being swapped in.
    2. Process p2 calls linux_ptrace(PTRACE_GETFPXREGS, p1_pid, ...)
    3. After acquiring a reference to FIRST_THREAD_IN_PROC(p1),
       p2 blocks in faultin() while p1 finishes being swapped in.
       This means p2 won't get back the lock on p1 until after p1's
       threads are runnable.
    4. After p1 is swapped in, the first thread in p1 exits.
    5. p2 now uses its dangling reference to p1's first thread.
  
  Revision  Changes    Path
  1.14      +4 -3      src/sys/i386/linux/linux_ptrace.c