From owner-freebsd-net@FreeBSD.ORG Thu Apr 12 08:43:47 2007 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id BF4C116A403; Thu, 12 Apr 2007 08:43:47 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by mx1.freebsd.org (Postfix) with ESMTP id 98BBB13C484; Thu, 12 Apr 2007 08:43:47 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 51603216C4C; Thu, 12 Apr 2007 04:43:49 -0400 (EDT) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute1.internal (MEProxy); Thu, 12 Apr 2007 04:43:47 -0400 X-Sasl-enc: vf+74FBMSZMjknh0ZOGcMdiFd0yM47Iivo81U7cfQ/ik 1176367427 Received: from [192.168.123.18] (82-35-112-254.cable.ubr07.dals.blueyonder.co.uk [82.35.112.254]) by mail.messagingengine.com (Postfix) with ESMTP id 6B09422F49; Thu, 12 Apr 2007 04:43:47 -0400 (EDT) Message-ID: <461DF140.2020203@FreeBSD.org> Date: Thu, 12 Apr 2007 09:43:44 +0100 From: "Bruce M. Simpson" User-Agent: Thunderbird 1.5.0.10 (X11/20070407) MIME-Version: 1.0 To: Andrew Thompson References: <20070412010707.GC9390@heff.fud.org.nz> In-Reply-To: <20070412010707.GC9390@heff.fud.org.nz> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org Subject: Re: ipv6 multicast refcnt panic X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Apr 2007 08:43:47 -0000 Andrew Thompson wrote: > I have come across this panic which appears to be from incorrect > refcounting on the inet6 multicast code. > I'm assuming this is in -CURRENT, as the refcount code has not yet been MFCed. ... > in6m_refcount is still 1 so the in6_multi is not freed. I'll try to investigate further as time permits. Thanks for pointing this out, I suspect the same problem affects vlan and other nested cloners. Regards, BMS