Date: Sat, 6 Aug 2005 01:54:11 +0000 (UTC) From: Max Laier <mlaier@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/contrib/pf/net pf.c pfvar.h Message-ID: <200508060154.j761sBxl039263@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
mlaier 2005-08-06 01:54:11 UTC FreeBSD src repository Modified files: (Branch: RELENG_5) sys/contrib/pf/net pf.c pfvar.h Log: MFC: pf.c, 1.35 pfvar.h, 1.12 Prevent a race condition. As pf_send_tcp() - called for expired synproxy states - has to drop the lock when calling back to ip_output(), the state purge timeout might run and gc the state. This results in a rb-tree inconsistency. With this change we flag expiring states while holding the lock and back off if the flag is already set. Reported by: glebius Revision Changes Path 1.18.2.10 +3 -1 src/sys/contrib/pf/net/pf.c 1.8.2.3 +3 -0 src/sys/contrib/pf/net/pfvar.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200508060154.j761sBxl039263>