Author: mav
Date: Mon Jun  3 17:11:26 2019
New Revision: 348554
URL: https://svnweb.freebsd.org/changeset/base/348554

Log:
  9688 aggsum_fini leaks memory
  
  illumos/illumos-gate@29bf2d68bef208274f5a54a14cc80c4a8cb76f53
  
  Reviewed by: Serapheim Dimitropoulos <serapheim.dimi...@delphix.com>
  Reviewed by: Matt Ahrens <m...@delphix.com>
  Reviewed by: Prashanth Sreenivasa <p...@delphix.com>
  Reviewed by: Jorgen Lundman <lund...@lundman.net>
  Reviewed by: Igor Kozhukhov <i...@dilos.org>
  Approved by: Robert Mustacchi <r...@joyent.com>
  Author:     Paul Dagnelie <p...@delphix.com>

Modified:
  vendor-sys/illumos/dist/uts/common/fs/zfs/aggsum.c
  vendor-sys/illumos/dist/uts/common/fs/zfs/arc.c

Modified: vendor-sys/illumos/dist/uts/common/fs/zfs/aggsum.c
==============================================================================
--- vendor-sys/illumos/dist/uts/common/fs/zfs/aggsum.c  Mon Jun  3 17:08:49 
2019        (r348553)
+++ vendor-sys/illumos/dist/uts/common/fs/zfs/aggsum.c  Mon Jun  3 17:11:26 
2019        (r348554)
@@ -13,7 +13,7 @@
  * CDDL HEADER END
  */
 /*
- * Copyright (c) 2017 by Delphix. All rights reserved.
+ * Copyright (c) 2017, 2018 by Delphix. All rights reserved.
  */
 
 #include <sys/zfs_context.h>
@@ -99,6 +99,7 @@ aggsum_fini(aggsum_t *as)
 {
        for (int i = 0; i < as->as_numbuckets; i++)
                mutex_destroy(&as->as_buckets[i].asc_lock);
+       kmem_free(as->as_buckets, as->as_numbuckets * sizeof (aggsum_bucket_t));
        mutex_destroy(&as->as_lock);
 }
 

Modified: vendor-sys/illumos/dist/uts/common/fs/zfs/arc.c
==============================================================================
--- vendor-sys/illumos/dist/uts/common/fs/zfs/arc.c     Mon Jun  3 17:08:49 
2019        (r348553)
+++ vendor-sys/illumos/dist/uts/common/fs/zfs/arc.c     Mon Jun  3 17:11:26 
2019        (r348554)
@@ -6159,6 +6159,14 @@ arc_state_fini(void)
        multilist_destroy(arc_mru_ghost->arcs_list[ARC_BUFC_DATA]);
        multilist_destroy(arc_mfu->arcs_list[ARC_BUFC_DATA]);
        multilist_destroy(arc_mfu_ghost->arcs_list[ARC_BUFC_DATA]);
+
+       aggsum_fini(&arc_meta_used);
+       aggsum_fini(&arc_size);
+       aggsum_fini(&astat_data_size);
+       aggsum_fini(&astat_metadata_size);
+       aggsum_fini(&astat_hdr_size);
+       aggsum_fini(&astat_other_size);
+       aggsum_fini(&astat_l2_hdr_size);
 }
 
 uint64_t
@@ -6328,8 +6336,13 @@ arc_fini(void)
        mutex_destroy(&arc_adjust_lock);
        cv_destroy(&arc_adjust_waiters_cv);
 
-       arc_state_fini();
+       /*
+        * buf_fini() must proceed arc_state_fini() because buf_fin() may
+        * trigger the release of kmem magazines, which can callback to
+        * arc_space_return() which accesses aggsums freed in act_state_fini().
+        */
        buf_fini();
+       arc_state_fini();
 
        ASSERT0(arc_loaned_bytes);
 }
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to