nfe taskq kernel panic

[Arnaud Lacombe]

Hi,

On Thu, May 5, 2011 at 2:49 PM, Arnaud Lacombe <lacombar at gmail.com> wrote:
> There is a stale reference to the mbuf passed to, and freed in
> m_megapullup(); could you test the following patch ?
>
> diff --git a/sys/netinet/ipfw/ip_fw_nat.c b/sys/netinet/ipfw/ip_fw_nat.c
> index f8c3e63..80c13dc 100644
> --- a/sys/netinet/ipfw/ip_fw_nat.c
> +++ b/sys/netinet/ipfw/ip_fw_nat.c
> @@ -263,7 +263,7 @@ ipfw_nat(struct ip_fw_args *args, struct cfg_nat
> *t, struct mbuf *m)
>                retval = LibAliasOut(t->lib, c,
>                        mcl->m_len + M_TRAILINGSPACE(mcl));
>        if (retval == PKT_ALIAS_RESPOND) {
> -               m->m_flags |= M_SKIP_FIREWALL;
> +               mcl->m_flags |= M_SKIP_FIREWALL;
>                retval = PKT_ALIAS_OK;
>        }
>        if (retval != PKT_ALIAS_OK &&
>
> This was introduced in r188294 by piso@ (added to the CC: list).
>
this can only happen if you are NAT'ing SCTP traffic. So it might not
be the culprit in your case..

  - Arnaud