freebsd-nq/sys/cddl
Xin LI 4aadb12e0b Fix a bug in sa_find_sizes() which could lead to panic:
When calculating space needed for SA_BONUS buffers,
hdrsize is always rounded up to next 8-aligned boundary.
However, in two places the round up was done against
sum of 'total' plus hdrsize.  On the other hand,
hdrsize increments by 4 each time, which means in
certain conditions, we would end up returning with
will_spill == 0 and (total + hdrsize) larger than
full_space, leading to a failed assertion because
it's invalid for dmu_set_bonus.

Sponsored by:	iXsystems, Inc.
Reviewed by:	mm
MFC after:	3 days
2011-10-17 22:23:27 +00:00
..
boot/zfs zfs boot subroutines: correctly specify type of an integer literal 2011-09-13 14:07:05 +00:00
compat/opensolaris Second-to-last commit implementing Capsicum capabilities in the FreeBSD 2011-08-11 12:30:23 +00:00
contrib/opensolaris Fix a bug in sa_find_sizes() which could lead to panic: 2011-10-17 22:23:27 +00:00
dev Define dtrace_cmpset_long in terms of atomic_cmpset_long 2011-10-16 22:18:08 +00:00