Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Aug 2009 13:12:26 -0700
From:      "Li, Qing" <qing.li@bluecoat.com>
To:        "Larry Baird" <lab@gta.com>, <freebsd-current@freebsd.org>
Cc:        Mike Andrews <mandrews@bit0.com>
Subject:   RE: 8.0-BETA3 reproducible panic under load
Message-ID:  <B583FBF374231F4A89607B4D08578A43052773AF@bcs-mail03.internal.cacheflow.com>
In-Reply-To: <20090827181522.81970.qmail@mailgate.gta.com>
References:  <109727.111234.43119@localhost> <20090827181522.81970.qmail@mailgate.gta.com>

index | next in thread | previous in thread | raw e-mail

>
> Not sure if this is what you hit or not.  I once saw something
similar.
> The call to LLE_FREE() in ip_output doesn't expect NULL.  Adding
>    if (ro->ro_lle != NULL)
> just before the call to LLE_FREE() may fix your crashes.
> 

Actually, LLE_FREE() should not be called at all here because the 
"if (!nortfree)" block test applies to route entries that are not 
from the flow-table.  And if the route entry is not from the
flow-table, then the rt_lle field is invalid.

I will commit the fix.

Thanks,

-- Qing



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B583FBF374231F4A89607B4D08578A43052773AF>