[Bug 200288] Modify after Free: ZFS

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200288

--- Comment #16 from Alexander Kabaev <kan at FreeBSD.org> ---
Looking at the allocation path, I think it tries to allocate structure of 96
bytes in size, which should put the allocation into '128' malloc zone. You
might be better off watching that instead of 'solaris'. 'solaris' is an
umbrella type that covers all of the allocations of the code imported from
OpenSolaris. On my machine, vmstat -z gives 123470 active allocations in said
bucket, while vmstat -m reports 1614027 active allocations for the whole
solaris type, about 13x more. Due to the way memguard is implemented, it might
be more practical to use selector with less active entries. In reality, I think
one will need to hack memguard_cmp_mtp so match 'solaris' _and_ size to match
sizeof(struct rl).

-- 
You are receiving this mail because:
You are the assignee for the bug.