From owner-freebsd-current Fri Feb 12 23:31:40 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA07010 for freebsd-current-outgoing; Fri, 12 Feb 1999 23:31:40 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA07001 for ; Fri, 12 Feb 1999 23:31:38 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.9.2/8.9.1) id XAA13534; Fri, 12 Feb 1999 23:31:32 -0800 (PST) (envelope-from dillon) Date: Fri, 12 Feb 1999 23:31:32 -0800 (PST) From: Matthew Dillon Message-Id: <199902130731.XAA13534@apollo.backplane.com> To: Dom Mitchell Cc: David Malone , freebsd-current@FreeBSD.ORG Subject: Re: Lots of "panic: vrele: negative ref cnt" References: Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG :> twice, so if you do this a few times you can panic a machine. I've :> submitted a gnats report (kern/9970). : :I can confirm that this also halts my crashes with nmh's spost command. :I'll leave it up to an NFS guru to tell whether it's the *right* fix, :but it's certainly something that needs looking at, quickly. : :Thanks for your help. :-- :Dom Mitchell -- Palmer & Harvey McLane -- Unix Systems Administrator This fix looks right. I've compared the NFS code to the UFS code as well as looked at the link() system call. The man page is wrong, and the NFS code is wrong. I'll commit a fix to -4.x and after getting the OK from Jordan, to -3.x too. It also appears that nfs_rename() is broken ( it leaves namei data sitting around, so no crash but...) And also possibly other nfs VOP calls -- I'll have to audit all of them. -Matt Matthew Dillon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message