Mateusz Guzik 1f9e8f8ad9 Fix a race between kern_proc_{o,}filedesc_out and fdescfree leading
to use-after-free.

fdescfree proceeds to free file pointers once fd_refcnt reaches 0, but
kern_proc_{o,}filedesc_out only checked for hold count.

MFC after:	3 days
2014-02-21 22:29:09 +00:00
..
2014-02-08 05:35:36 +00:00
2013-11-23 00:28:18 +00:00
2014-02-20 04:56:55 +00:00
2013-11-29 20:14:26 +00:00
2013-11-11 13:19:55 +00:00
2014-02-19 17:06:04 +00:00
2014-02-06 13:28:06 +00:00
2013-12-30 08:36:17 +00:00