Date: Tue, 16 Aug 2011 20:50:07 GMT From: Arnaud Lacombe <lacombar@gmail.com> To: freebsd-net@FreeBSD.org Subject: Re: kern/155597: [panic] Kernel panics with " sbdrop" message Message-ID: <201108162050.p7GKo7mS018362@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/155597; it has been noted by GNATS. From: Arnaud Lacombe <lacombar@gmail.com> To: bug-followup@FreeBSD.org, vova@ashmanov.com Cc: Subject: Re: kern/155597: [panic] Kernel panics with "sbdrop" message Date: Tue, 16 Aug 2011 16:43:59 -0400 Hi, Does this still happen with 9.0-BETA ? If so, could this be a use-after-free, where an mbuf is freed (during an m_pullup() or alike), but the old reference is still kept around, gets added to the sockbuf, then the mbuf is re-allocated and corrupt the sockbuf ?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201108162050.p7GKo7mS018362>