Kernel-side: struct sigacts

• oops, that broke NFS!

  • delayed writes carried pointer to the proc that triggered the write

    • ...even after the proc had exited and the struct freed

  • moving the signal sets meant it started chasing a 0xdeadbeef pointer in the freed struct proc

  • "Boom"