o In aio_cancel(2), make sure that p->p_aioinfo isn't NULL before

dereferencing it.

Submitted by:	saureen <sshah@apple.com>
This commit is contained in:
Alan Cox 2002-08-11 04:09:14 +00:00
parent d8d737d751
commit b6c1f1efa2

View File

@ -1775,6 +1775,8 @@ aio_cancel(struct thread *td, struct aio_cancel_args *uap)
}
}
ki=p->p_aioinfo;
if (ki == NULL)
return (EINVAL);
s = splnet();
for (cbe = TAILQ_FIRST(&ki->kaio_jobqueue); cbe; cbe = cbn) {