From 763424fcf0aab477fb4476b72f2f08d09cd2daba Mon Sep 17 00:00:00 2001
From: David Greenman <dg@FreeBSD.org>
Date: Sat, 17 Dec 1994 04:04:42 +0000
Subject: [PATCH] Changed splimp to splhigh to close a potential hole that
 could lead to corrupted malloc data structures caused by frees occurring at
 other than splimp.

---
 sys/kern/kern_malloc.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sys/kern/kern_malloc.c b/sys/kern/kern_malloc.c
index f70cbfb7415..86e35d7401d 100644
--- a/sys/kern/kern_malloc.c
+++ b/sys/kern/kern_malloc.c
@@ -31,7 +31,7 @@
  * SUCH DAMAGE.
  *
  *	@(#)kern_malloc.c	8.3 (Berkeley) 1/4/94
- * $Id: kern_malloc.c,v 1.4 1994/10/02 17:35:17 phk Exp $
+ * $Id: kern_malloc.c,v 1.5 1994/10/09 07:34:56 davidg Exp $
  */
 
 #include <sys/param.h>
@@ -112,7 +112,7 @@ malloc(size, type, flags)
 #endif
 	indx = BUCKETINDX(size);
 	kbp = &bucket[indx];
-	s = splimp();
+	s = splhigh();
 #ifdef KMEMSTATS
 	while (ksp->ks_memuse >= ksp->ks_limit) {
 		if (flags & M_NOWAIT) {
@@ -267,7 +267,7 @@ free(addr, type)
 	kup = btokup(addr);
 	size = 1 << kup->ku_indx;
 	kbp = &bucket[kup->ku_indx];
-	s = splimp();
+	s = splhigh();
 #ifdef DIAGNOSTIC
 	/*
 	 * Check for returns of data that do not point to the