NetBSD Problem Report #42663

From  Fri Jan 22 20:50:16 2010
Return-Path: <>
Received: from ( [])
	by (Postfix) with ESMTP id E71EA63C556
	for <>; Fri, 22 Jan 2010 20:50:16 +0000 (UTC)
Message-Id: <>
Date: Fri, 22 Jan 2010 20:50:16 +0000 (UTC)
Subject: lwp_exit() might race with lwp_free()
X-Send-Pr-Version: www-1.0

>Number:         42663
>Category:       kern
>Synopsis:       lwp_exit() might race with lwp_free()
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jan 22 20:55:00 +0000 2010
>Originator:     Mindaugas Rasiukevicius
>Release:        NetBSD 5.99.24
When used with non-curlwp (e.g. _lwp_create() error path), lwp_exit()
might race with lwp_free().  Specifically, cpu_lwp_free() might be in
action while struct lwp is being re-used post-lwp_free().
Code inspection.
a) Set p_zomblwp at the last point.
b) Revisit zombie LWP concept after lwp_cache and uvm_uarea_cache merge.

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD:,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.