Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Aug 2009 13:12:26 -0700
From:      "Li, Qing" <qing.li@bluecoat.com>
To:        "Larry Baird" <lab@gta.com>, <freebsd-current@freebsd.org>
Cc:        Mike Andrews <mandrews@bit0.com>
Subject:   RE: 8.0-BETA3 reproducible panic under load
Message-ID:  <B583FBF374231F4A89607B4D08578A43052773AF@bcs-mail03.internal.cacheflow.com>
In-Reply-To: <20090827181522.81970.qmail@mailgate.gta.com>
References:  <109727.111234.43119@localhost> <20090827181522.81970.qmail@mailgate.gta.com>

next in thread | previous in thread | raw e-mail | index | archive | help
>
> Not sure if this is what you hit or not.  I once saw something
similar.
> The call to LLE_FREE() in ip_output doesn't expect NULL.  Adding
>    if (ro->ro_lle !=3D NULL)
> just before the call to LLE_FREE() may fix your crashes.
>=20

Actually, LLE_FREE() should not be called at all here because the=20
"if (!nortfree)" block test applies to route entries that are not=20
from the flow-table.  And if the route entry is not from the
flow-table, then the rt_lle field is invalid.

I will commit the fix.

Thanks,

-- Qing




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B583FBF374231F4A89607B4D08578A43052773AF>