From owner-cvs-src-old@FreeBSD.ORG  Sun Nov 29 19:50:59 2009
Return-Path: <owner-cvs-src-old@FreeBSD.ORG>
Delivered-To: cvs-src-old@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 713C51065693
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:50:59 +0000 (UTC)
	(envelope-from yongari@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 606208FC1D
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:50:59 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id nATJoxka009333
	for <cvs-src-old@freebsd.org>; Sun, 29 Nov 2009 19:50:59 GMT
	(envelope-from yongari@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id nATJoxAQ009332
	for cvs-src-old@freebsd.org; Sun, 29 Nov 2009 19:50:59 GMT
	(envelope-from yongari@repoman.freebsd.org)
Message-Id: <200911291950.nATJoxAQ009332@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	yongari@repoman.freebsd.org using -f
From: Pyun YongHyeon <yongari@FreeBSD.org>
Date: Sun, 29 Nov 2009 19:50:39 +0000 (UTC)
To: cvs-src-old@freebsd.org
X-FreeBSD-CVS-Branch: RELENG_7
Subject: cvs commit: src/sys/dev/re if_re.c
X-BeenThere: cvs-src-old@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: **OBSOLETE** CVS commit messages for the src tree
	<cvs-src-old.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src-old>
List-Post: <mailto:cvs-src-old@freebsd.org>
List-Help: <mailto:cvs-src-old-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src-old>,
	<mailto:cvs-src-old-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Nov 2009 19:50:59 -0000

yongari     2009-11-29 19:50:39 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/dev/re           if_re.c 
  Log:
  SVN rev 199931 on 2009-11-29 19:50:39Z by yongari
  
  MFC 198814.
    Add a check to know whether driver is still running after
    reacquiring driver lock in Rx handler. re(4) drops a driver lock
    before passing received frame to upper stack and reacquire the
    lock. During the time window ioctl calls could be executed and if
    the ioctl was interface down request, driver will stop the
    controller and free allocated mbufs. After that when driver comes
    back to Rx handler again it does not know what was happend so it
    could access free mbufs which in turn cause panic.
  
    Reported by:  Norbert Papke < npapk <> acm dot org >
    Tested by:    Norbert Papke < npapk <> acm dot org >
  
  Revision   Changes    Path
  1.95.2.50  +2 -0      src/sys/dev/re/if_re.c