K 10
svn:author
V 8
dumbbell
K 8
svn:date
V 27
2008-01-28T10:26:24.000000Z
K 7
svn:log
V 533
MFC:
  sys/kern/vfs_aio.c; revision 1.237
  sys/sys/event.h; revision 1.38

  When asked to use kqueue, AIO stores its internal state in the
  `kn_sdata' member of the newly registered knote. The problem is that
  this member is overwritten by a call to kevent(2) with the EV_ADD flag,
  targetted at the same kevent/knote. For instance, a userland application
  may set the pointer to NULL, leading to a panic.

  A testcase was provided by the submitter.

  PR:	kern/118911
  Submitted by:	MOROHOSHI Akihiko <moro@remus.dti.ne.jp>

END