From owner-freebsd-net@freebsd.org  Fri Nov 13 11:03:48 2015
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 38242A2EB02
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Fri, 13 Nov 2015 11:03:48 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 244B8124B
 for <freebsd-net@FreeBSD.org>; Fri, 13 Nov 2015 11:03:48 +0000 (UTC)
 (envelope-from bugzilla-noreply@freebsd.org)
Received: from bugs.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id tADB3m67053800
 for <freebsd-net@FreeBSD.org>; Fri, 13 Nov 2015 11:03:48 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
From: bugzilla-noreply@freebsd.org
To: freebsd-net@FreeBSD.org
Subject: [Bug 204437] 10.2 STABLE Crashing with IPSec Support
Date: Fri, 13 Nov 2015 11:03:48 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Base System
X-Bugzilla-Component: kern
X-Bugzilla-Version: 10.2-STABLE
X-Bugzilla-Keywords: crash, needs-qa
X-Bugzilla-Severity: Affects Some People
X-Bugzilla-Who: emeric.poupon@stormshield.eu
X-Bugzilla-Status: New
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-net@FreeBSD.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: mfc-stable9? mfc-stable10?
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-204437-2472-wmDPNqrleo@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-204437-2472@https.bugs.freebsd.org/bugzilla/>
References: <bug-204437-2472@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Nov 2015 11:03:48 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D204437

--- Comment #7 from emeric.poupon@stormshield.eu ---
BTW, the crash occurs on FreeBSD-9.3.

I have that:

(kgdb) f 10
#10 0xffffffff8056b4d1 in tcp_input (m=3D0xfffffe005fd0da00, off0=3D20) at
../../../netinet/tcp_input.c:944
944    in ../../../netinet/tcp_input.c
(kgdb) info locals=20
next_hop =3D <value optimized out>
th =3D (struct tcphdr *) 0xfffffe005fd0dacc
ip =3D (struct ip *) 0xfffffe005fd0dab8
inp =3D (struct inpcb *) 0xfffffe00c26e9320
tp =3D (struct tcpcb *) 0x0
so =3D (struct socket *) 0x0
optp =3D (u_char *) 0x0
optlen =3D 0
len =3D <value optimized out>
tlen =3D 0
off =3D 40
thflags =3D 16
rstreason =3D <value optimized out>
iptos =3D 0 '\0'
fwd_tag =3D (struct m_tag *) 0x0
ip6 =3D (struct ip6_hdr *) 0x0
isipv6 =3D 0
to =3D {
  to_flags =3D 0,=20
  to_tsval =3D 3406246400,=20
  to_tsecr =3D 4294966784,=20
  to_sacks =3D 0x2508040 <Address 0x2508040 out of bounds>,=20
  to_signature =3D 0x0,=20
  to_mss =3D 6560,=20
  to_wscale =3D 236 '=EF=BF=BD',=20
  to_nsacks =3D 0 '\0',=20
  to_spare =3D 4294967168
}
s =3D <value optimized out>
ti_locked =3D 1
__func__ =3D "tcp_input"

--=20
You are receiving this mail because:
You are the assignee for the bug.=