will 528b271d19 FireWire: Don't allow a tlabel to reference an xfer after free.
sys/dev/firewire/firewire.c:
- fw_xfer_unload(): Since we are about to free this xfer, call fw_tl_free()
  to remove the xfer from its tlabel's list, if it has a tlabel.
- In every occasion when a xfer is removed from a tlabel's list, reset
  xfer->tl to -1 while holding fc->tlabel_lock, so that the xfer isn't
  mis-identified as belonging to a tlabel.

This doesn't fix all the use-after-free problems for M_FWMEM, but is an
incremental towards that goal.

Reviewed by:	kan, sbruno
Sponsored by:	Spectra Logic
2013-04-08 23:16:42 +00:00
..
2013-03-17 07:28:17 +00:00
2013-01-22 18:51:14 +00:00
2013-04-02 00:57:54 +00:00
2012-07-28 21:56:24 +00:00
MFC
2013-02-26 21:09:35 +00:00
2013-02-19 18:22:25 +00:00
2013-02-20 10:38:34 +00:00
2012-08-06 08:58:54 +00:00
2012-10-26 20:24:13 +00:00
2012-11-23 19:20:38 +00:00
2013-03-01 01:42:31 +00:00
MFC
2013-02-26 23:52:23 +00:00
2012-07-26 13:58:43 +00:00
2013-03-29 18:03:00 +00:00
2013-02-19 19:25:50 +00:00
MFC
2013-02-27 18:17:34 +00:00
2013-02-25 16:22:40 +00:00
MFC
2013-03-09 01:39:42 +00:00
2013-02-21 12:40:52 +00:00
2013-03-04 16:16:23 +00:00
2012-10-10 08:36:38 +00:00
2012-10-10 08:36:38 +00:00
2012-10-10 08:36:38 +00:00
2013-04-07 13:03:57 +00:00
2012-10-10 08:36:38 +00:00