On Sun, 27 May 2001 21:30:59 +0200, [EMAIL PROTECTED] said:
> The ui_ref member in struct uidinfo is only 16 bits. This means
> that a fatal wraparound due to a missing call to uifree() can
> happen rather quickly.
Great! With your patch and the earlier one from Thomas I can build
wo
> freeing uidinfo: uid = 0, sbsize = 3197224
> freeing uidinfo: uid = 0, proccnt = 86
[...]
> trap(c8d20018,c01d0010,c8cb0010,4,c0b3351c) at trap+0x5d0
> calltrap() at calltrap+0x5
> --- trap 0xc, eip = 0xc01ba652, esp = 0xc8d27ed4, ebp = 0xc8d27ee0 ---
> _mtx_lock_sleep(c0b3351c,0,c035076c,364) a
freeing uidinfo: uid = 0, sbsize = 3197224
freeing uidinfo: uid = 0, proccnt = 86
kernel trap 12 with interrupts disabled
panic: blockable sleep lock (sleep mutex) Giant @ ../../vm/vm_fault.c:213
Debugger("panic")
Stopped at Debugger+0x45: pushl %ebx
db> t
Debugger(c0350d9b) at Debugger+0x45
panic