cvs commit: src/sys/netinet ip_fw2.c

[Robert Watson]

rwatson     2008-09-27 19:28:28 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_fw2.c 
  Log:
  SVN rev 183418 on 2008-09-27 19:28:28Z by rwatson
  
  When an inpcb doesn't have a socket but the inpcb is passed to ipfw
  in the transmit path, such as TCPS_TIMEWAIT, fail the credential
  extraction immediately rather than acquiring locks and looking up
  the inpcb on the global lists in order to reach the conclusion that
  the credential extraction has failed.
  
  This is more efficient, but more importantly, it avoids lock
  recursion on the inpcbinfo, which is no longer allowed with rwlocks.
  This appears to have been responsible for at least two reported
  panics.
  
  MFC after:      3 days
  Reported by:    ganbold
  
  Revision  Changes    Path
  1.195     +2 -1      src/sys/netinet/ip_fw2.c