[Bug 235097] ci runs panic with use-after-free when running sys/netpfil/pf/nat tests

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=235097

--- Comment #15 from Andrey V. Elsukov <ae at FreeBSD.org> ---
(In reply to Andrey V. Elsukov from comment #14)
> > We free the ifaddr, but we can still have a pointer to it in ifp->if_addr.
> > This check triggers, and in several test runs with this patch I've not
> > managed to reproduce the panic any more. I'm doing more runs, because this
> > problem comes and goes, but I hope this will be a useful pointer to someone
> > who knows that code better than me.
> 
> ifa_free() does not free the memory immediately, so it is safe to make
> access to ifp->if_addr while you are in NET_EPOCH() section.

or while you keep the reference to if_addr, look at the history of recent
changes to this code.

-- 
You are receiving this mail because:
You are the assignee for the bug.