From owner-freebsd-net@FreeBSD.ORG  Wed Jan 11 14:20:09 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BF1181065676
	for <freebsd-net@hub.freebsd.org>; Wed, 11 Jan 2012 14:20:09 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id A72F58FC19
	for <freebsd-net@hub.freebsd.org>; Wed, 11 Jan 2012 14:20:09 +0000 (UTC)
Received: from freefall.freebsd.org (localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q0BEK9TP053081
	for <freebsd-net@freefall.freebsd.org>; Wed, 11 Jan 2012 14:20:09 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q0BEK9bE053080;
	Wed, 11 Jan 2012 14:20:09 GMT (envelope-from gnats)
Date: Wed, 11 Jan 2012 14:20:09 GMT
Message-Id: <201201111420.q0BEK9bE053080@freefall.freebsd.org>
To: freebsd-net@FreeBSD.org
From: Vladimir Kutakov <vova@ashmanov.com>
Cc: 
Subject: Re: kern/155597: [panic] Kernel panics with &quot; sbdrop&quot;
	message
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Vladimir Kutakov <vova@ashmanov.com>
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jan 2012 14:20:09 -0000

The following reply was made to PR kern/155597; it has been noted by GNATS.

From: Vladimir Kutakov <vova@ashmanov.com>
To: Arnaud Lacombe <lacombar@gmail.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: kern/155597: [panic] Kernel panics with &quot;sbdrop&quot; message
Date: Wed, 11 Jan 2012 17:55:41 +0400

 We have tried RELENG_8_2 and the panic doesn't happen anymore. Many =
 thanks to the FreeBSD team.
 
 On Aug 17, 2011, at 1:43 AM, Arnaud Lacombe wrote:
 
 > Hi,
 >=20
 > Does this still happen with 9.0-BETA ?
 >=20
 > If so, could this be a use-after-free, where an mbuf is freed (during
 > an m_pullup() or alike), but the old reference is still kept around,
 > gets added to the sockbuf, then the mbuf is re-allocated and corrupt
 > the sockbuf ?
 
 
 --
 =D0=92=D0=BB=D0=B0=D0=B4=D0=B8=D0=BC=D0=B8=D1=80 =D0=9A=D1=83=D1=82=D0=B0=D0=
 =BA=D0=BE=D0=B2
 =D0=A2=D0=B5=D1=85=D0=BD=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B9 =
 =D0=B4=D0=B8=D1=80=D0=B5=D0=BA=D1=82=D0=BE=D1=80
 =D0=97=D0=90=D0=9E "=D0=9F=D0=BE=D0=B8=D1=81=D0=BA=D0=BE=D0=B2=D1=8B=D0=B5=
  =D1=82=D0=B5=D1=85=D0=BD=D0=BE=D0=BB=D0=BE=D0=B3=D0=B8=D0=B8"
 vova@ashmanov.com