> I would appreciate if someone can test the code on NetBSD 1.4.2
> and confirm that a normal user can (deterministically) lock a machine.
> If this is the case, I will submit a PR.

Tried on i386/1.4.2: it doesn't lock, but panics:

panic: AMAP_B2SLOT: invalid byte count

backtrace is:

_amap_alloc(1256c,0,1,c2f6df40) at _amap_alloc+0x22
_amap_copy(c2ee8580,c2f66568,1,1,a000,a001) at _amap_copy+0xb6
_uvmfault_amapcopy(c2f6df40,c2ee8580,106,0,0) at _uvmfault_amapcopy+0xc8
_uvm_fault(c2ee8580,a000,0,3,0) at _uvm_fault+0x17f
_trap() at _trap+0x40b

So a normal user can panic the system, still a bad thing, you should file
a PR.


Martin