Subject: kern/37568: netsmb is fast&loose with callouts
To: None <,,>
From: None <>
List: netbsd-bugs
Date: 12/19/2007 17:00:01
>Number:         37568
>Category:       kern
>Synopsis:       netsmb is fast&loose with callouts
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Dec 19 17:00:00 +0000 2007
>Originator:     Antti Kantee
>Release:        NetBSD nose-to-tail(tm)
In case of an abort, smbfs / netsmb might attempt to callout_stop() rqp->sr_timo_ch in smb_iod_rqprocessed() even though callout_init() was not called for the particular request.
code inspection