Hi,

On Thu, May 5, 2011 at 2:49 PM, Arnaud Lacombe <lacom...@gmail.com> wrote:
There is a stale reference to the mbuf passed to, and freed in
m_megapullup(); could you test the following patch ?

diff --git a/sys/netinet/ipfw/ip_fw_nat.c b/sys/netinet/ipfw/ip_fw_nat.c
index f8c3e63..80c13dc 100644
--- a/sys/netinet/ipfw/ip_fw_nat.c
+++ b/sys/netinet/ipfw/ip_fw_nat.c
@@ -263,7 +263,7 @@ ipfw_nat(struct ip_fw_args *args, struct cfg_nat
*t, struct mbuf *m)
               retval = LibAliasOut(t->lib, c,
                       mcl->m_len + M_TRAILINGSPACE(mcl));
       if (retval == PKT_ALIAS_RESPOND) {
-               m->m_flags |= M_SKIP_FIREWALL;
+               mcl->m_flags |= M_SKIP_FIREWALL;
               retval = PKT_ALIAS_OK;
       }
       if (retval != PKT_ALIAS_OK &&

This was introduced in r188294 by piso@ (added to the CC: list).

this can only happen if you are NAT'ing SCTP traffic. So it might not
be the culprit in your case..

  - Arnaud

I don't use anything related to sctp but I'll do check the patch, there is nothing more to do for me now anyway.
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to