kern/155597: [panic] Kernel panics with " sbdrop" message

[Vladimir Kutakov]

The following reply was made to PR kern/155597; it has been noted by GNATS.

From: Vladimir Kutakov <vova at ashmanov.com>
To: Arnaud Lacombe <lacombar at gmail.com>
Cc: bug-followup at FreeBSD.org
Subject: Re: kern/155597: [panic] Kernel panics with &quot;sbdrop&quot; message
Date: Wed, 11 Jan 2012 17:55:41 +0400

 We have tried RELENG_8_2 and the panic doesn't happen anymore. Many =
 thanks to the FreeBSD team.
 
 On Aug 17, 2011, at 1:43 AM, Arnaud Lacombe wrote:
 
 > Hi,
 >=20
 > Does this still happen with 9.0-BETA ?
 >=20
 > If so, could this be a use-after-free, where an mbuf is freed (during
 > an m_pullup() or alike), but the old reference is still kept around,
 > gets added to the sockbuf, then the mbuf is re-allocated and corrupt
 > the sockbuf ?
 
 
 --
 =D0=92=D0=BB=D0=B0=D0=B4=D0=B8=D0=BC=D0=B8=D1=80 =D0=9A=D1=83=D1=82=D0=B0=D0=
 =BA=D0=BE=D0=B2
 =D0=A2=D0=B5=D1=85=D0=BD=D0=B8=D1=87=D0=B5=D1=81=D0=BA=D0=B8=D0=B9 =
 =D0=B4=D0=B8=D1=80=D0=B5=D0=BA=D1=82=D0=BE=D1=80
 =D0=97=D0=90=D0=9E "=D0=9F=D0=BE=D0=B8=D1=81=D0=BA=D0=BE=D0=B2=D1=8B=D0=B5=
  =D1=82=D0=B5=D1=85=D0=BD=D0=BE=D0=BB=D0=BE=D0=B3=D0=B8=D0=B8"
 vova at ashmanov.com