d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a race condition, where a TTY could be destroyed twice.

Browse Source 
There are special cases where tty_rel_free() can be called twice in a
row, namely when closing and revoking the TTY at the same moment. Only
call destroy_dev_sched_cb() once.

Reported by:	Jeremie Le Hen
MFC after:	1 week
This commit is contained in:
Ed Schouten 2010-07-06 08:56:34 +00:00
parent 9f9c8c59ae
commit 822eb2b050
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/kern/tty.c
View File

@ -1040,7 +1040,8 @@ tty_rel_free(struct tty *tp)
tp->t_dev = NULL;
tty_unlock(tp);
destroy_dev_sched_cb(dev, tty_dealloc, tp);
if (dev != NULL)
destroy_dev_sched_cb(dev, tty_dealloc, tp);
}
void