From owner-freebsd-current  Fri Oct  5 20:48:40 2001
Delivered-To: freebsd-current@freebsd.org
Received: from mail-green.research.att.com (H-135-207-30-103.research.att.com [135.207.30.103])
	by hub.freebsd.org (Postfix) with ESMTP id 8811E37B403
	for <freebsd-current@freebsd.org>; Fri,  5 Oct 2001 20:48:37 -0700 (PDT)
Received: from alliance.research.att.com (alliance.research.att.com [135.207.26.26])
	by mail-green.research.att.com (Postfix) with ESMTP
	id A10DB1E042; Fri,  5 Oct 2001 23:48:36 -0400 (EDT)
Received: from windsor.research.att.com (windsor.research.att.com [135.207.26.46])
	by alliance.research.att.com (8.8.7/8.8.7) with ESMTP id XAA01908;
	Fri, 5 Oct 2001 23:48:31 -0400 (EDT)
From: Bill Fenner <fenner@research.att.com>
Received: (from fenner@localhost)
	by windsor.research.att.com (8.8.8+Sun/8.8.5) id UAA07334;
	Fri, 5 Oct 2001 20:48:30 -0700 (PDT)
Message-Id: <200110060348.UAA07334@windsor.research.att.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
To: kuriyama@imgsrc.co.jp
Subject: Re: Panic at vlan_input()
Cc: freebsd-current@freebsd.org
Date: Fri, 5 Oct 2001 20:48:30 -0700
Versions: dmail (solaris) 2.2j/makemail 2.9b
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG


I think this is a bug in the loadable VLAN code; there's a != which
should be an ==, which results in packets with known tags being
discarded and would result in packets with unknown tags causing a
null pointer dereference.  I'll commit a fix soon as soon as I've
tested it more.

  Bill

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message