kernel - Fix callout structural corruption bug
authorMatthew Dillon <dillon@apollo.backplane.com>
Sat, 26 Dec 2020 19:25:21 +0000 (11:25 -0800)
committerMatthew Dillon <dillon@apollo.backplane.com>
Sat, 26 Dec 2020 19:25:21 +0000 (11:25 -0800)
commit005cad8bb9e8518ecab176aa4d7ef484d54cb303
treeb47c0fe928497f9325654852a8be0bd7c95b4c06
parent0b7381572b131c74051832dc251604e7f77b5a54
kernel - Fix callout structural corruption bug

* _callout_cancel_quick() was not properly testing whether
  the callout being canceled matched sc->next, resulting
  it occassional kernel panics under certain circumstances.

* Could be triggered during dsynth runs.

* Fixed by adding the proper test.

Reported-by: zrj
sys/kern/kern_timeout.c