Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Dec 2020 16:24:29 +0000
From:      bugzilla-noreply@freebsd.org
To:        testing@FreeBSD.org
Subject:   [Bug 244703] sys.netpfil.pf.nat.exhaust panics kernel
Message-ID:  <bug-244703-32464-QH2CmxIPkT@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-244703-32464@https.bugs.freebsd.org/bugzilla/>
References:  <bug-244703-32464@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D244703

--- Comment #10 from commit-hook@FreeBSD.org ---
A commit references this bug:

Author: kp
Date: Tue Dec  1 16:24:00 UTC 2020
New revision: 368237
URL: https://svnweb.freebsd.org/changeset/base/368237

Log:
  if: Fix panic when destroying vnet and epair simultaneously

  When destroying a vnet and an epair (with one end in the vnet) we often
  panicked. This was the result of the destruction of the epair, which dest=
roys
  both ends simultaneously, happening while vnet_if_return() was moving the
  struct ifnet to its home vnet. This can result in a freed ifnet being
re-added
  to the home vnet V_ifnet list. That in turn panics the next time the ifne=
t is
  used.

  Prevent this race by ensuring that vnet_if_return() cannot run at the same
time
  as if_detach() or epair_clone_destroy().

  PR:           238870, 234985, 244703, 250870
  MFC after:    2 weeks
  Sponsored by: Modirum MDPay
  Differential Revision:        https://reviews.freebsd.org/D27378

Changes:
  head/sys/net/if.c

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-244703-32464-QH2CmxIPkT>