On Fri, 29 Sep 2006, Martin Blapp wrote:
Free tty struct after last close. This should fix the pty-leak by numbers.
Remove workarounds for tty_refcount beeing 0, this will be fixed
differently
later.
Back out rev 1.145 since we initialize the tty struct from scratch and bad
things can't happen anymore.
Sigh. Peter Holmes stress tests did show that we still have problems. With
the beckout of rev. 1.145 we get again the same panics as the pty_pts code
does.
This is deep somewhere in the devfs code. It does happen with/without freeing
struct tty.
Memory modified after free 0xc45b7d00(252) val=deadc0dd @ 0xc45b7d70
panic: Most recently used by DEVFS1
...
I think I found the bug while looking for problems near vgonel(). We're
nowhere near ready to free devices in in last-close, since vgonel() doesn't
do anything to evict processes from device functions before it forces the
device closed. Drivers must be aware of the problem. The tty driver
already is. See the comments about t_gen near tty_close() and ttysleep().
t_gen must live across close so that any processes in device functions can
check it after they wake up, and the tty and device data structures must
live across last- close to hold t_gen and anything else needed for the
device functions to return. Sleeping device functions normally wake up
after last-close returns.
Bruce
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
