kern/155597: [panic] Kernel panics with " sbdrop" message

[Arnaud Lacombe]

The following reply was made to PR kern/155597; it has been noted by GNATS.

From: Arnaud Lacombe <lacombar at gmail.com>
To: bug-followup at FreeBSD.org, vova at ashmanov.com
Cc:  
Subject: Re: kern/155597: [panic] Kernel panics with &quot;sbdrop&quot; message
Date: Tue, 16 Aug 2011 16:43:59 -0400

 Hi,
 
 Does this still happen with 9.0-BETA ?
 
 If so, could this be a use-after-free, where an mbuf is freed (during
 an m_pullup() or alike), but the old reference is still kept around,
 gets added to the sockbuf, then the mbuf is re-allocated and corrupt
 the sockbuf ?