Date: Tue, 23 Oct 2018 12:55:03 -0700 From: Kristof Provost <kp@FreeBSD.org> To: "Andrey V. Elsukov" <ae@FreeBSD.org> Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r339646 - head/sys/net Message-ID: <01551B73-DD94-4F44-A0CB-276480B603A1@FreeBSD.org> In-Reply-To: <201810231303.w9ND33C1016372@repo.freebsd.org> References: <201810231303.w9ND33C1016372@repo.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> On 23 Oct 2018, at 06:03, Andrey V. Elsukov <ae@FreeBSD.org> wrote: > > Author: ae > Date: Tue Oct 23 13:03:03 2018 > New Revision: 339646 > URL: https://svnweb.freebsd.org/changeset/base/339646 > > Log: > Add the check that current VNET is ready and access to srchash is > allowed. > > ipsec_srcaddr() callback can be called during VNET teardown, since > ingress address checking subsystem isn't VNET specific. And thus > callback can make access to already freed memory. To prevent this, > use V_ipsec_idhtbl pointer as indicator of VNET readiness. And make > epoch_wait() after resetting it to NULL in vnet_ipsec_uninit() to > be sure that ipsec_srcaddr() is finished its work. > > Reported by: kp > MFC after: 20 days > Thanks for the fix. Kristof
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01551B73-DD94-4F44-A0CB-276480B603A1>