Date: Mon, 23 Jan 2006 14:39:42 -0500 From: Kris Kennaway <kris@obsecurity.org> To: "JINMEI Tatuya / ?$B?@L@C#:H" <jinmei@isl.rdc.toshiba.co.jp> Cc: net@FreeBSD.org, Kris Kennaway <kris@obsecurity.org> Subject: Re: Changing time causes ipv6 panics Message-ID: <20060123193942.GA44622@xor.obsecurity.org> In-Reply-To: <y7vzmlsaio4.wl%jinmei@isl.rdc.toshiba.co.jp> References: <20060116004438.GA27901@xor.obsecurity.org> <y7vzmlsaio4.wl%jinmei@isl.rdc.toshiba.co.jp>
next in thread | previous in thread | raw e-mail | index | archive | help
--BOKacYhQ+x31HxR3 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Jan 19, 2006 at 02:30:35PM +0900, JINMEI Tatuya / ?$B?@L@C#:H wrote: > >>>>> On Sun, 15 Jan 2006 19:44:38 -0500,=20 > >>>>> Kris Kennaway <kris@obsecurity.org> said: >=20 > > I ran ntpdate on an amd64 system with ipv6 enabled and a skewed clock > > (ntpdate stepped it back by about an hour), and immediately got a > > use-after-free panic in ifaddr. When I rebooted with memguard enabled > > on this malloc type and retried, I got this panic upon changing the > > date forward, then back, then forward again (also note the garbage > > return data from ntpdate): >=20 > Which version of FreeBSD are you using? Up-to-date 7.0. I didn't try it with older versions. Kris --BOKacYhQ+x31HxR3 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFD1TD+Wry0BWjoQKURAhy7AKCOdvr5CqisZlHx/whkGeqfQjqOJQCbBTv9 qmQoSpocgJdpNsEQ+O/IW9U= =unWk -----END PGP SIGNATURE----- --BOKacYhQ+x31HxR3--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060123193942.GA44622>