3d10572d1a
can clear the pointer to mutex, not the thread doing mutex handoff. Because _mutex_lock_backout does not hold scheduler lock while testing THR_FLAGS_IN_SYNCQ and then reading mutex pointer, it is possible mutex owner begin to unlock and handoff the mutex to the current thread, and mutex pointer will be cleared to NULL before current thread reading it, so current thread will end up with deferencing a NULL pointer, Fix the race by making mutex waiters to clear their mutex pointers. While I am here, also save inherited priority in mutex for PTHREAD_PRIO_INERIT mutex in mutex_trylock_common just like what we did in mutex_lock_common. |
||
|---|---|---|
| .. | ||
| compat | ||
| csu | ||
| libalias | ||
| libatm | ||
| libbind | ||
| libbz2 | ||
| libc | ||
| libc_r | ||
| libcalendar | ||
| libcam | ||
| libcom_err | ||
| libcompat | ||
| libcrypt | ||
| libdevinfo | ||
| libdevstat | ||
| libdisk | ||
| libedit | ||
| libexpat | ||
| libfetch | ||
| libform | ||
| libftpio | ||
| libgeom | ||
| libio | ||
| libipsec | ||
| libipx | ||
| libisc | ||
| libkse | ||
| libkvm | ||
| libmd | ||
| libmenu | ||
| libmilter | ||
| libmp | ||
| libncp | ||
| libncurses | ||
| libnetgraph | ||
| libopie | ||
| libpam | ||
| libpanel | ||
| libpcap | ||
| libpthread | ||
| libradius | ||
| librpcsvc | ||
| libsbuf | ||
| libsm | ||
| libsmb | ||
| libsmdb | ||
| libsmutil | ||
| libstand | ||
| libtacplus | ||
| libtelnet | ||
| libthr | ||
| libufs | ||
| libugidfw | ||
| libusbhid | ||
| libutil | ||
| libvgl | ||
| libwrap | ||
| libxpg4 | ||
| liby | ||
| libypclnt | ||
| libz | ||
| msun | ||
| ncurses | ||
| Makefile | ||
| Makefile.inc | ||