Date: Thu, 8 Jan 2004 06:12:15 +0000 (UTC) From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> To: Larry Rosenman <ler@lerctr.org> Cc: freebsd-current@freebsd.org Subject: Re: IPSec Panic/Shutdown Message-ID: <Pine.BSF.4.53.0401080554300.94658@e0-0.zab2.int.zabbadoz.net> In-Reply-To: <30700000.1073524951@lerlaptop.lerctr.org> References: <30700000.1073524951@lerlaptop.lerctr.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 7 Jan 2004, Larry Rosenman wrote:
hi,
> On a shutdown, I got the following panic:
> Sources from Last Nite ~19:30 US/Central.
..
> #11 0xc071c768 in calltrap () at {standard input}:94
> #12 0xc066985e in key_freesp (sp=0xc469a980) at
> /usr/src/sys/netkey/key.c:1106
> #13 0xc065b6c4 in ipsec4_delete_pcbpolicy (inp=0xc469a980)
> at /usr/src/sys/netinet6/ipsec.c:1532
> #14 0xc062045a in in_pcbdetach (inp=0xc469a980) at
> /usr/src/sys/netinet/in_pcb.c:689
I am finally up and running for
6:01AM up 8:24, 1 user, load averages: 0.15, 0.14, 0.10
and all methods I previously could crash this router due to IPSec
related problems have failed yet.
In the case above an extra --sp->refcnt led to a free of an SP
(secpolicy) and the memory gets touched after free (in this special
case the refcnt is decremented by one - obviously this is the one that
should lead to the free).
So I should have a patch for this in the queue. Should be able to
build a new kernel with minimalistic changes this evening and if
everything still is ok submit a patch for review in 24 hours.
Hopefully I am not overconfident ;-)
--
Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT
56 69 73 69 74 http://www.zabbadoz.net/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.53.0401080554300.94658>