Date: Wed, 03 Sep 2025 19:18:19 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 279653] Page fault in in6_selecthlim Message-ID: <bug-279653-7501-i7LMrhpfSA@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-279653-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-279653-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D279653 --- Comment #18 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Db5c46895fdddcdb7dd1994598925d6989= ea7c8f2 commit b5c46895fdddcdb7dd1994598925d6989ea7c8f2 Author: Zhenlei Huang <zlei@FreeBSD.org> AuthorDate: 2025-09-03 19:16:40 +0000 Commit: Zhenlei Huang <zlei@FreeBSD.org> CommitDate: 2025-09-03 19:16:40 +0000 ifnet: Defer detaching address family dependent data While diagnosing PR 279653 and PR 285129, I observed that thread may write to freed memory but the system does not crash. This hides the real problem. A clear NULL pointer derefence is much better than writing to freed memory. PR: 279653 PR: 285129 Reviewed by: glebius MFC after: 3 weeks Differential Revision: https://reviews.freebsd.org/D49444 sys/net/if.c | 26 +++++++++++++++++++++----- sys/netinet/in.c | 2 ++ sys/netinet6/in6.c | 2 ++ 3 files changed, 25 insertions(+), 5 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-279653-7501-i7LMrhpfSA>