From owner-cvs-src-old@FreeBSD.ORG  Mon Nov  2 18:35:19 2009
Return-Path: <owner-cvs-src-old@FreeBSD.ORG>
Delivered-To: cvs-src-old@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 958CA10656A7
	for <cvs-src-old@freebsd.org>; Mon,  2 Nov 2009 18:35:19 +0000 (UTC)
	(envelope-from yongari@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 838438FC17
	for <cvs-src-old@freebsd.org>; Mon,  2 Nov 2009 18:35:19 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id nA2IZJli088578
	for <cvs-src-old@freebsd.org>; Mon, 2 Nov 2009 18:35:19 GMT
	(envelope-from yongari@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id nA2IZJOY088577
	for cvs-src-old@freebsd.org; Mon, 2 Nov 2009 18:35:19 GMT
	(envelope-from yongari@repoman.freebsd.org)
Message-Id: <200911021835.nA2IZJOY088577@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	yongari@repoman.freebsd.org using -f
From: Pyun YongHyeon <yongari@FreeBSD.org>
Date: Mon, 2 Nov 2009 18:35:05 +0000 (UTC)
To: cvs-src-old@freebsd.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: src/sys/dev/re if_re.c
X-BeenThere: cvs-src-old@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: **OBSOLETE** CVS commit messages for the src tree
	<cvs-src-old.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src-old>
List-Post: <mailto:cvs-src-old@freebsd.org>
List-Help: <mailto:cvs-src-old-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Nov 2009 18:35:19 -0000

yongari     2009-11-02 18:35:05 UTC

  FreeBSD src repository

  Modified files:
    sys/dev/re           if_re.c 
  Log:
  SVN rev 198814 on 2009-11-02 18:35:05Z by yongari
  
  Add a check to know whether driver is still running after
  reacquiring driver lock in Rx handler. re(4) drops a driver lock
  before passing received frame to upper stack and reacquire the
  lock. During the time window ioctl calls could be executed and if
  the ioctl was interface down request, driver will stop the
  controller and free allocated mbufs. After that when driver comes
  back to Rx handler again it does not know what was happend so it
  could access free mbufs which in turn cause panic.
  
  Reported by:     Norbert Papke < npapk <> acm dot org >
  Tested by:       Norbert Papke < npapk <> acm dot org >
  
  Revision  Changes    Path
  1.162     +2 -0      src/sys/dev/re/if_re.c