Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F135471337
D31974.id95319.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
2 KB
Referenced Files
None
Subscribers
None
D31974.id95319.diff
View Options
diff --git a/sys/kern/uipc_socket.c b/sys/kern/uipc_socket.c
--- a/sys/kern/uipc_socket.c
+++ b/sys/kern/uipc_socket.c
@@ -1120,11 +1120,12 @@
sofree(struct socket *so)
{
struct protosw *pr = so->so_proto;
+ bool last __diagused;
SOCK_LOCK_ASSERT(so);
- if ((so->so_state & SS_NOFDREF) == 0 || so->so_count != 0 ||
- (so->so_state & SS_PROTOREF) || (so->so_qstate == SQ_COMP)) {
+ if ((so->so_state & (SS_NOFDREF | SS_PROTOREF)) != SS_NOFDREF ||
+ refcount_load(&so->so_count) != 0 || so->so_qstate == SQ_COMP) {
SOCK_UNLOCK(so);
return;
}
@@ -1160,8 +1161,9 @@
__func__, so, sol));
TAILQ_REMOVE(&sol->sol_incomp, so, so_list);
sol->sol_incqlen--;
- /* This is guarenteed not to be the last. */
- refcount_release(&sol->so_count);
+ last = refcount_release(&sol->so_count);
+ KASSERT(!last, ("%s: released last reference for %p",
+ __func__, sol));
so->so_qstate = SQ_NONE;
so->so_listen = NULL;
} else
@@ -1169,7 +1171,7 @@
("%s: so %p not on (in)comp with so_listen",
__func__, so));
sorele(sol);
- KASSERT(so->so_count == 1,
+ KASSERT(refcount_load(&so->so_count) == 1,
("%s: so %p count %u", __func__, so, so->so_count));
so->so_count = 0;
}
@@ -1225,6 +1227,7 @@
struct accept_queue lqueue;
struct socket *sp, *tsp;
int error = 0;
+ bool last __diagused;
KASSERT(!(so->so_state & SS_NOFDREF), ("soclose: SS_NOFDREF on enter"));
@@ -1271,8 +1274,9 @@
sp->so_qstate = SQ_NONE;
sp->so_listen = NULL;
SOCK_UNLOCK(sp);
- /* Guaranteed not to be the last. */
- refcount_release(&so->so_count);
+ last = refcount_release(&so->so_count);
+ KASSERT(!last, ("%s: released last reference for %p",
+ __func__, so));
}
}
KASSERT((so->so_state & SS_NOFDREF) == 0, ("soclose: NOFDREF"));
@@ -1284,7 +1288,7 @@
SOCK_UNLOCK(sp);
soabort(sp);
} else {
- /* sp is now in sofree() */
+ /* See the handling of queued sockets in sofree(). */
SOCK_UNLOCK(sp);
}
}
@@ -4010,6 +4014,7 @@
void
soisconnected(struct socket *so)
{
+ bool last __diagused;
SOCK_LOCK(so);
so->so_state &= ~(SS_ISCONNECTING|SS_ISDISCONNECTING|SS_ISCONFIRMING);
@@ -4042,8 +4047,9 @@
sorele(head);
return;
}
- /* Not the last one, as so holds a ref. */
- refcount_release(&head->so_count);
+ last = refcount_release(&head->so_count);
+ KASSERT(!last, ("%s: released last reference for %p",
+ __func__, head));
}
again:
if ((so->so_options & SO_ACCEPTFILTER) == 0) {
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Tue, Nov 11, 3:39 AM (13 h, 11 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
25099054
Default Alt Text
D31974.id95319.diff (2 KB)
Attached To
Mode
D31974: socket: Add assertions around naked refcount decrements
Attached
Detach File
Event Timeline
Log In to Comment