From owner-freebsd-net@FreeBSD.ORG  Thu May  5 19:33:06 2011
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3BB3A1065674
	for <freebsd-net@freebsd.org>; Thu,  5 May 2011 19:33:06 +0000 (UTC)
	(envelope-from gpm@hotplug.ru)
Received: from shadow.rusoft.ru (shadow.rusoft.ru [217.16.18.75])
	by mx1.freebsd.org (Postfix) with ESMTP id E1D878FC1C
	for <freebsd-net@freebsd.org>; Thu,  5 May 2011 19:33:05 +0000 (UTC)
Received: from shadow.rusoft.ru (localhost [127.0.0.1])
	by shadow.rusoft.ru (Postfix) with ESMTP id 758C335BD;
	Thu,  5 May 2011 23:33:04 +0400 (MSD)
Received: from jazz.rusoft.ru (unknown [83.222.3.162])
	by shadow.rusoft.ru (Postfix) with ESMTP id 4E16835BC;
	Thu,  5 May 2011 23:33:04 +0400 (MSD)
Received: from ghost-pc.home.lan (unknown [213.141.135.21])
	by jazz.rusoft.ru (Postfix) with ESMTPA id 7579F1CC011;
	Thu,  5 May 2011 23:33:04 +0400 (MSD)
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
To: "Arnaud Lacombe" <lacombar@gmail.com>
References: <op.vu0q8asqaevz08@ghost-pc.home.lan>
	<BANLkTimvboyYGXL21vzeQ+gPOO4QCUGskQ@mail.gmail.com>
	<BANLkTimTUE_SvVUA1RWRBvLWeaYWvT62CQ@mail.gmail.com>
	<BANLkTi=vBxUm83TCv8JDeSh+U4g0Y=WN3A@mail.gmail.com>
Date: Thu, 05 May 2011 23:32:55 +0400
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "Emil Muratov" <gpm@hotplug.ru>
Message-ID: <op.vu0wk5zdaevz08@ghost-pc.home.lan>
In-Reply-To: <BANLkTi=vBxUm83TCv8JDeSh+U4g0Y=WN3A@mail.gmail.com>
User-Agent: Opera Mail/11.10 (Win32)
X-Virus-Scanned: ClamAV using ClamSMTP
Cc: freebsd-net@freebsd.org
Subject: Re: nfe taskq kernel panic
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 May 2011 19:33:06 -0000


> Hi,
>
> On Thu, May 5, 2011 at 2:49 PM, Arnaud Lacombe <lacombar@gmail.com>  
> wrote:
>> There is a stale reference to the mbuf passed to, and freed in
>> m_megapullup(); could you test the following patch ?
>>
>> diff --git a/sys/netinet/ipfw/ip_fw_nat.c b/sys/netinet/ipfw/ip_fw_nat.c
>> index f8c3e63..80c13dc 100644
>> --- a/sys/netinet/ipfw/ip_fw_nat.c
>> +++ b/sys/netinet/ipfw/ip_fw_nat.c
>> @@ -263,7 +263,7 @@ ipfw_nat(struct ip_fw_args *args, struct cfg_nat
>> *t, struct mbuf *m)
>>                retval = LibAliasOut(t->lib, c,
>>                        mcl->m_len + M_TRAILINGSPACE(mcl));
>>        if (retval == PKT_ALIAS_RESPOND) {
>> -               m->m_flags |= M_SKIP_FIREWALL;
>> +               mcl->m_flags |= M_SKIP_FIREWALL;
>>                retval = PKT_ALIAS_OK;
>>        }
>>        if (retval != PKT_ALIAS_OK &&
>>
>> This was introduced in r188294 by piso@ (added to the CC: list).
>>
> this can only happen if you are NAT'ing SCTP traffic. So it might not
> be the culprit in your case..
>
>   - Arnaud

I don't use anything related to sctp but I'll do check the patch, there is  
nothing more to do for me now anyway.