Date: Wed, 20 Jul 2005 18:58:27 +0000 (UTC) From: Max Laier <mlaier@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/contrib/pf/net pf.c pfvar.h Message-ID: <200507201858.j6KIwRNZ097685@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
mlaier 2005-07-20 18:58:27 UTC
FreeBSD src repository
Modified files:
sys/contrib/pf/net pf.c pfvar.h
Log:
Prevent a race condition. As pf_send_tcp() - called for expired synproxy
states - has to drop the lock when calling back to ip_output(), the state
purge timeout might run and gc the state. This results in a rb-tree
inconsistency. With this change we flag expiring states while holding the
lock and back off if the flag is already set.
Reported by: glebius
MFC after: 2 weeks
Revision Changes Path
1.35 +5 -0 src/sys/contrib/pf/net/pf.c
1.12 +3 -0 src/sys/contrib/pf/net/pfvar.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200507201858.j6KIwRNZ097685>