From owner-cvs-all@FreeBSD.ORG  Sat Sep 27 19:28:38 2008
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3A39C1065753;
	Sat, 27 Sep 2008 19:28:34 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id DB0328FC1A;
	Sat, 27 Sep 2008 19:28:34 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id m8RJSYmb076883;
	Sat, 27 Sep 2008 19:28:34 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from svn2cvs@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id m8RJSYx0076882;
	Sat, 27 Sep 2008 19:28:34 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Message-Id: <200809271928.m8RJSYx0076882@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to
	rwatson@repoman.freebsd.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
Date: Sat, 27 Sep 2008 19:28:28 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/netinet ip_fw2.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 27 Sep 2008 19:28:38 -0000

rwatson     2008-09-27 19:28:28 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_fw2.c 
  Log:
  SVN rev 183418 on 2008-09-27 19:28:28Z by rwatson
  
  When an inpcb doesn't have a socket but the inpcb is passed to ipfw
  in the transmit path, such as TCPS_TIMEWAIT, fail the credential
  extraction immediately rather than acquiring locks and looking up
  the inpcb on the global lists in order to reach the conclusion that
  the credential extraction has failed.
  
  This is more efficient, but more importantly, it avoids lock
  recursion on the inpcbinfo, which is no longer allowed with rwlocks.
  This appears to have been responsible for at least two reported
  panics.
  
  MFC after:      3 days
  Reported by:    ganbold
  
  Revision  Changes    Path
  1.195     +2 -1      src/sys/netinet/ip_fw2.c