The following reply was made to PR kern/35278; it has been noted by GNATS.

From: yamt@mwd.biglobe.ne.jp (YAMAMOTO Takashi)
To: elad@NetBSD.org
Cc: gnats-bugs@NetBSD.org
Subject: Re: kern/35278: veriexec sometimes feeds user va to log(9)
Date: Sun, 24 Dec 2006 00:22:34 +0900 (JST)

 > YAMAMOTO Takashi wrote:
 > 
 > > VOP_ABORTOP doesn't free pnbuf if SAVESTART is set.
 > > 
 > >> in the diff I posted, you're referring to the
 > >> PNBUF_PUT() after the 'out' label in sys_unlink(), right?
 > > 
 > > yes.
 > 
 > PNBUF_PUT() call removed, see attached diff.
 > 
 > -e.
 
 now you are leaking pnbuf, i think.
 VOP_REMOVE doesn't free pnbuf for you.
 
 YAMAMOTO Takashi