D40906.id124276.diff
No OneTemporary
Actions

Size

980 B

Referenced Files

None

Subscribers

None

D40906.id124276.diff
View Options

	diff --git a/sys/kern/vfs_cache.c b/sys/kern/vfs_cache.c
	--- a/sys/kern/vfs_cache.c
	+++ b/sys/kern/vfs_cache.c
	@@ -3665,23 +3665,7 @@

	addend = 0;

	- /*
	- * Check for VBAD to work around the vp_crossmp bug in lookup().
	- *
	- * For example consider tmpfs on /tmp and realpath /tmp. ni_vp will be
	- * set to mount point's root vnode while ni_dvp will be vp_crossmp.
	- * If the type is VDIR (like in this very case) we can skip looking
	- * at ni_dvp in the first place. However, since vnodes get passed here
	- * unlocked the target may transition to doomed state (type == VBAD)
	- * before we get to evaluate the condition. If this happens, we will
	- * populate part of the buffer and descend to vn_fullpath_dir with
	- * vp == vp_crossmp. Prevent the problem by checking for VBAD.
	- */
	type = atomic_load_8(&vp->v_type);
	- if (type == VBAD) {
	- error = ENOENT;
	- goto out_bad;
	- }
	if (type != VDIR) {
	addend = hrdl_name_length + 2;
	if (*buflen < addend) {