Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Apr 2025 12:28:20 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 283426] panic in sbappendaddr_locked() - if_ovpn related?
Message-ID:  <bug-283426-7501-EiSEKwkAHc@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-283426-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-283426-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D283426

--- Comment #16 from Kristof Provost <kp@freebsd.org> ---
Thanks for that test case, it was extremely helpful.

I see what's happening here now. The if_ovpn filter function calls m_unshar=
e(),
which allocates a new mbuf, but then decides it doesn't want the packet aft=
er
all.
That's normally fine, but we can't tell the caller that we've messed with t=
he m
pointer, so the caller continues with a now invalid mbuf pointer.

I hope to propose a fix later today.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-283426-7501-EiSEKwkAHc>