Date: Tue, 02 Aug 2016 11:56:58 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 211486] [panic] [IPSec] [IP6] Crash with IPv6 ESP usage Message-ID: <bug-211486-8-FJ7WGzsnj6@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-211486-8@https.bugs.freebsd.org/bugzilla/> References: <bug-211486-8@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211486 Andrey V. Elsukov <ae@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|freebsd-bugs@FreeBSD.org |ae@FreeBSD.org Status|New |In Progress --- Comment #4 from Andrey V. Elsukov <ae@FreeBSD.org> --- Created attachment 173191 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=173191&action=edit Proposed patch Can you test this patch? It looks like it should help. As I understand from your backtrace, your host is going to send TCP ACK via ip6_output, it handled by ip6_ipsec_output(), due to presence of corresponding IPSec policy. But, since *ro* pointer is zero and wasn't initialized yet, NULL pointer dereference occurs in listed by you check. Also ro_flags has 0x1a offset in the struct route_in6 (fault addres is 0x1a). -- You are receiving this mail because: You are the assignee for the bug.help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-211486-8-FJ7WGzsnj6>