[Bug 233535] Fix refcount leak in IPv6 MLD code leading to loss of IPv6 connectivity

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233535

--- Comment #55 from commit-hook at freebsd.org ---
A commit references this bug:

Author: hselasky
Date: Fri Feb  1 09:07:28 UTC 2019
New revision: 343649
URL: https://svnweb.freebsd.org/changeset/base/343649

Log:
  MFC r343394:
  When detaching a network interface drain the workqueue freeing the inm's
  because the destructor will access the if_ioctl() callback in the ifnet
  pointer which is about to be freed. This prevents use-after-free.

  PR:                   233535
  Differential Revision:        https://reviews.freebsd.org/D18887
  Reviewed by:          bz (net)
  Tested by:            ae
  Sponsored by:         Mellanox Technologies

Changes:
_U  stable/12/
  stable/12/sys/netinet6/in6_ifattach.c
  stable/12/sys/netinet6/in6_mcast.c
  stable/12/sys/netinet6/in6_var.h

-- 
You are receiving this mail because:
You are on the CC list for the bug.