https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233377

--- Comment #7 from Mark Johnston <[email protected]> ---
(In reply to Sean Bruno from comment #6)
Indeed, this points again at the UMA bucket zones.  The stack is somewhat
bogus; I believe the only way that we can call uma_zalloc() while freeing
something is by allocating a bucket.  I think the best approach will be to
figure out why memguard-enabled kernels don't boot, and then use memguard to
find the use-after-free.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to