bsd/kern/kern_aio.c

543 		/* the aiocb causes unspecified results.  We return EBADF in */
757  * held for async IO call associated with the given aiocb pointer.
956 			(aiocbp == USER_ADDR_NULL && fd == entryp->aiocb.aio_fildes) ) {
1272 	/* copyin our aiocb pointers from list */
1424 	if (entryp->aiocb.aio_reqprio < 0)
1425 		entryp->aiocb.aio_reqprio = 0;
1426 	if (entryp->aiocb.aio_reqprio > 0) {
1427 		entryp->priority -= entryp->aiocb.aio_reqprio;
1450  * The caller gets error and return status for each aiocb in the list
1567 			entryp->aiocb.aio_sigevent = aiosigev;
1877 			do_munge_aiocb_user64_to_user(&aiocb64, &entryp->aiocb);
1884 			do_munge_aiocb_user32_to_user( &aiocb32, &entryp->aiocb );
1896 	/* do some more validation on the aiocb and embedded file descriptor */
2032 	if ( entryp->aiocb.aio_lio_opcode == LIO_NOP ) {
2086  * validate the aiocb passed in by one of the aio syscalls.
2098 		if ( entryp->aiocb.aio_lio_opcode == LIO_READ )
2100 		else if ( entryp->aiocb.aio_lio_opcode == LIO_WRITE )
2102 		else if ( entryp->aiocb.aio_lio_opcode == LIO_NOP )
2114 		if ( entryp->aiocb.aio_nbytes > INT_MAX		||
2115 			 entryp->aiocb.aio_buf == USER_ADDR_NULL ||
2116 			 entryp->aiocb.aio_offset < 0 )
2121 	 * validate aiocb.aio_sigevent.  at this point we only support
2127 	switch ( entryp->aiocb.aio_sigevent.sigev_notify ) {
2133 		signum = entryp->aiocb.aio_sigevent.sigev_signo;
2155 	result = fp_lookup( entryp->procp, entryp->aiocb.aio_fildes, &fp , 1);
2167 		fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp , 1);
2247 	if ( entryp->aiocb.aio_sigevent.sigev_notify == SIGEV_SIGNAL &&
2266 				 entryp->aiocb.aio_sigevent.sigev_signo, 0, 0 );
2268 			psignal( entryp->procp, entryp->aiocb.aio_sigevent.sigev_signo );
2319 		active_requests = aio_proc_active_requests_for_file( entryp->procp, entryp->aiocb.aio_fildes);
2363 	if ( (error = fp_lookup(entryp->procp, entryp->aiocb.aio_fildes, &fp , 0)) )
2366 		fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2374 				entryp->aiocb.aio_buf,
2375 				entryp->aiocb.aio_nbytes,
2376 				entryp->aiocb.aio_offset, FOF_OFFSET,
2378 	fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2395 	if ( (error = fp_lookup(entryp->procp, entryp->aiocb.aio_fildes, &fp , 0)) )
2398 		fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2413 				entryp->aiocb.aio_buf,
2414 				entryp->aiocb.aio_nbytes,
2415 				entryp->aiocb.aio_offset,
2420 		fp_drop_written(entryp->procp, entryp->aiocb.aio_fildes, fp);
2422 		fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2449 		if (entryp->aiocb.aio_fildes == fd) {
2490 	error = fp_getfvp( entryp->procp, entryp->aiocb.aio_fildes, &fp, &vp);
2493 		        fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2504 		fp_drop(entryp->procp, entryp->aiocb.aio_fildes, fp, 0);
2634  * In the case of an aiocb from a
2637  * aiocb (in our case that is a user_aiocb)