Date: Thu, 03 Apr 2025 11:23:21 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 285813] Panic (NULL deref) in arptimer Message-ID: <bug-285813-7501-40CM1CSdPO@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-285813-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-285813-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D285813 --- Comment #11 from Peter Blok <peter.blok@bsd4all.org> --- The following snippet migh explain it in if_ether.c arp_check_update_lle expects la to be locked and has an assert for that, but only with INVARIANTS defined. /* Free newly-create entry and handle packet */ lltable_free_entry(LLTABLE(ifp), la); la =3D la_tmp; la_tmp =3D NULL; arp_check_update_lle(ah, isaddr, ifp, bridged, la); /* arp_check_update_lle() returns @la unlocked */ --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-285813-7501-40CM1CSdPO>