From owner-cvs-src-old@FreeBSD.ORG  Sun Nov 29 19:49:38 2009
Return-Path: <owner-cvs-src-old@FreeBSD.ORG>
Delivered-To: cvs-src-old@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6E0B1106568F
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:49:38 +0000 (UTC)
	(envelope-from yongari@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 5D33D8FC27
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:49:38 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id nATJncSd009180
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:49:38 GMT
	(envelope-from yongari@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id nATJncLZ009179
	for cvs-src-old@freebsd.org; Sun, 29 Nov 2009 19:49:38 GMT
	(envelope-from yongari@repoman.freebsd.org)
Message-Id: <200911291949.nATJncLZ009179@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	yongari@repoman.freebsd.org using -f
From: Pyun YongHyeon <yongari@FreeBSD.org>
Date: Sun, 29 Nov 2009 19:49:21 +0000 (UTC)
To: cvs-src-old@freebsd.org
X-FreeBSD-CVS-Branch: RELENG_8
Subject: cvs commit: src/sys/dev/re if_re.c
X-BeenThere: cvs-src-old@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: **OBSOLETE** CVS commit messages for the src tree
	<cvs-src-old.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src-old>
List-Post: <mailto:cvs-src-old@freebsd.org>
List-Help: <mailto:cvs-src-old-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Nov 2009 19:49:38 -0000

yongari     2009-11-29 19:49:21 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_8)
    sys/dev/re           if_re.c 
  Log:
  SVN rev 199930 on 2009-11-29 19:49:21Z by yongari
  
  MFC 198814.
    Add a check to know whether driver is still running after
    reacquiring driver lock in Rx handler. re(4) drops a driver lock
    before passing received frame to upper stack and reacquire the
    lock. During the time window ioctl calls could be executed and if
    the ioctl was interface down request, driver will stop the
    controller and free allocated mbufs. After that when driver comes
    back to Rx handler again it does not know what was happend so it
    could access free mbufs which in turn cause panic.
  
    Reported by:  Norbert Papke < npapk <> acm dot org >
    Tested by:    Norbert Papke < npapk <> acm dot org >
  
  Revision   Changes    Path
  1.160.2.3  +2 -0      src/sys/dev/re/if_re.c