Konstantin Belousov 15822fcdbe Rev. 1.274 put the ttyrel() call before the destroy_dev() in the
ttyfree(), freeing the tty. Since destroy_dev() may call d_purge()
cdevsw method, that is the ttypurge() for the tty, the code ends up
accessing freed tty structure.

Put the ttyrel() after destroy_dev() in the ttyfree. To prevent the
panic the rev. 1.274 provided fix for, check the TS_GONE in sysctl
handler and refuse to provide information on such tty.

Reported, debugging help and tested by:	pho
DIscussed with and reviewed by:	jhb
MFC after:	1 week
2008-05-23 16:47:55 +00:00
..
2008-03-31 12:05:52 +00:00
2008-03-07 15:27:08 +00:00
2008-05-12 06:42:06 +00:00
2008-04-29 05:48:05 +00:00
2008-05-23 04:06:49 +00:00
2007-12-14 21:30:51 +00:00
2008-03-19 07:33:16 +00:00
2008-04-08 09:45:49 +00:00
2008-05-18 21:08:12 +00:00