⬢ DragonFlyBSD Kernel Audit
DF-5582 / run.race.fixed.log
← back to finding ↓ download raw
== DF-5582 race: detach while the real handler is in-flight ==
hw.df5582.blocking: 0 -> 1
hw.df5582.go: 0 -> 0
-- parked=1 (handler in-flight, interpreter exited)
-- tearing down ig4iic/smbacpi NOW (smbacpi_detach underneath)
df5582: detach signaled
-- detached=2 parked_at_detach=0
   (1 = handler still in-flight when teardown returned: STOCK)
   (0 = teardown waited for the handler to finish: FIXED)
-- unloading smbacpi.ko (stock kernel only: frees the module
   text the parked handler would resume into)
(smbacpi not loaded)
 2    1 0xffffffff81d01000    76020 ehci.ko
 3    1 0xffffffff81d78000    85ff0 xhci.ko
 4    1 0xffffffff82600000     3000 df5582_rig.ko
-- releasing the parked SMBUS_* call
   stock smbacpi.ko : handler resumes on freed objects -> panic
   fixed smbacpi.ko : detach drained it -> nothing to corrupt
hw.df5582.release: 0 -> 0
-- STILL ALIVE after race (expected on the FIXED module)