Date: Wed, 11 Jan 2012 14:20:09 GMT From: Vladimir Kutakov <vova@ashmanov.com> To: freebsd-net@FreeBSD.org Subject: Re: kern/155597: [panic] Kernel panics with " sbdrop" message Message-ID: <201201111420.q0BEK9bE053080@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/155597; it has been noted by GNATS. From: Vladimir Kutakov <vova@ashmanov.com> To: Arnaud Lacombe <lacombar@gmail.com> Cc: bug-followup@FreeBSD.org Subject: Re: kern/155597: [panic] Kernel panics with "sbdrop" message Date: Wed, 11 Jan 2012 17:55:41 +0400 We have tried RELENG_8_2 and the panic doesn't happen anymore. Many = thanks to the FreeBSD team. On Aug 17, 2011, at 1:43 AM, Arnaud Lacombe wrote: > Hi, >=20 > Does this still happen with 9.0-BETA ? >=20 > If so, could this be a use-after-free, where an mbuf is freed (during > an m_pullup() or alike), but the old reference is still kept around, > gets added to the sockbuf, then the mbuf is re-allocated and corrupt > the sockbuf ? -- =D0=92=D0=BB=D0=B0=D0=B4=D0=B8=D0=BC=D0=B8=D1=80 =D0=9A=D1=83=D1=82=D0=B0=D0= =BA=D0=BE=D0=B2 =D0=A2=D0=B5=D1=85=D0=BD=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B9 = =D0=B4=D0=B8=D1=80=D0=B5=D0=BA=D1=82=D0=BE=D1=80 =D0=97=D0=90=D0=9E "=D0=9F=D0=BE=D0=B8=D1=81=D0=BA=D0=BE=D0=B2=D1=8B=D0=B5= =D1=82=D0=B5=D1=85=D0=BD=D0=BE=D0=BB=D0=BE=D0=B3=D0=B8=D0=B8" vova@ashmanov.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201201111420.q0BEK9bE053080>