Date: Sun, 24 Apr 2005 09:57:46 -0700 From: Sam Leffler <sam@errno.com> To: src-committers@FreeBSD.org Cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/sys _task.h taskqueue.h src/sys/kern subr_taskqueue.c Message-ID: <426BD00A.6080203@errno.com> In-Reply-To: <200504241652.j3OGqjcr000905@repoman.freebsd.org> References: <200504241652.j3OGqjcr000905@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Sam Leffler wrote: > sam 2005-04-24 16:52:45 UTC > > FreeBSD src repository > > Modified files: > sys/sys _task.h taskqueue.h > sys/kern subr_taskqueue.c > Log: > o eliminate modification of task structures after their run to avoid > modify-after-free races when the task structure is malloc'd > o shrink task structure by removing ta_flags (no longer needed with > avoid fix) and combining ta_pending and ta_priority This fixes modify-after-free panics for memory owned by acpitask. It's easy to hit if you use the ath driver on a laptop where acpi is active and load the wireless network. Sam
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?426BD00A.6080203>