cvs commit: src/sys/netinet ip_fw2.c

[Robert Watson]

rwatson     2008-09-29 19:19:27 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_7)
    sys/netinet          ip_fw2.c 
  Log:
  SVN rev 183473 on 2008-09-29 19:19:27Z by rwatson
  
  Merge r183418 from head to stable/7:
  
    When an inpcb doesn't have a socket but the inpcb is passed to ipfw
    in the transmit path, such as TCPS_TIMEWAIT, fail the credential
    extraction immediately rather than acquiring locks and looking up
    the inpcb on the global lists in order to reach the conclusion that
    the credential extraction has failed.
  
    This is more efficient, but more importantly, it avoids lock
    recursion on the inpcbinfo, which is no longer allowed with rwlocks.
    This appears to have been responsible for at least two reported
    panics.
  
    Reported by:        ganbold
  
  Approved by:    re (kib)
  
  Revision    Changes    Path
  1.175.2.12  +2 -1      src/sys/netinet/ip_fw2.c