Date: Tue, 02 Aug 2016 11:56:58 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 211486] [panic] [IPSec] [IP6] Crash with IPv6 ESP usage Message-ID: <bug-211486-8-FJ7WGzsnj6@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-211486-8@https.bugs.freebsd.org/bugzilla/> References: <bug-211486-8@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211486 Andrey V. Elsukov <ae@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|freebsd-bugs@FreeBSD.org |ae@FreeBSD.org Status|New |In Progress --- Comment #4 from Andrey V. Elsukov <ae@FreeBSD.org> --- Created attachment 173191 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D173191&action= =3Dedit Proposed patch Can you test this patch? It looks like it should help. As I understand from your backtrace, your host is going to send TCP ACK via ip6_output, it handled by ip6_ipsec_output(), due to presence of correspond= ing IPSec policy. But, since *ro* pointer is zero and wasn't initialized yet, N= ULL pointer dereference occurs in listed by you check. Also ro_flags has 0x1a offset in the struct route_in6 (fault addres is 0x1a). --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-211486-8-FJ7WGzsnj6>