Subject: Re: bin/37236 (Mac OS X NFS client frequently crashes rpc.lockd(8) on NetBSD)
To: None <tron@NetBSD.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,>
From: None <tron@netbsd.org>
List: netbsd-bugs
Date: 11/04/2007 20:04:11
Synopsis: Mac OS X NFS client frequently crashes rpc.lockd(8) on NetBSD

Responsible-Changed-From-To: bin-bug-people->tron
Responsible-Changed-By: tron@netbsd.org
Responsible-Changed-When: Sun, 04 Nov 2007 20:04:08 +0000
Responsible-Changed-Why:
I'll handle this PR.


State-Changed-From-To: open->analyzed
State-Changed-By: tron@netbsd.org
State-Changed-When: Sun, 04 Nov 2007 20:04:08 +0000
State-Changed-Why:
The bug is hopefully well understood now:
1.) My latest crashes indicates heap corruption of "lcklst_head".
2.) "clnt_cache_addr" is exactly in front of "lcklst_head".
3.) There was a boundary violation of "clnt_cache_addr" in "lockd_lock.c"
    at line 240.