[Bug 233535] Fix refcount leak in IPv6 MLD code leading to loss of IPv6 connectivity

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233535

--- Comment #51 from commit-hook at freebsd.org ---
A commit references this bug:

Author: hselasky
Date: Thu Jan 24 08:25:03 UTC 2019
New revision: 343394
URL: https://svnweb.freebsd.org/changeset/base/343394

Log:
  When detaching a network interface drain the workqueue freeing the inm's
  because the destructor will access the if_ioctl() callback in the ifnet
  pointer which is about to be freed. This prevents use-after-free.

  PR:                   233535
  Differential Revision:        https://reviews.freebsd.org/D18887
  Reviewed by:          bz (net)
  Tested by:            ae
  MFC after:            1 week
  Sponsored by:         Mellanox Technologies

Changes:
  head/sys/netinet6/in6_ifattach.c
  head/sys/netinet6/in6_mcast.c
  head/sys/netinet6/in6_var.h

-- 
You are receiving this mail because:
You are on the CC list for the bug.