https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233535
--- Comment #51 from commit-h...@freebsd.org ---
A commit references this bug:

Author: hselasky
Date: Thu Jan 24 08:25:03 UTC 2019
New revision: 343394
URL: https://svnweb.freebsd.org/changeset/base/343394

Log:
  When detaching a network interface drain the workqueue freeing the inm's
  because the destructor will access the if_ioctl() callback in the ifnet
  pointer which is about to be freed. This prevents use-after-free.

  PR:                   233535
  Differential Revision:        https://reviews.freebsd.org/D18887
  Reviewed by:          bz (net)
  Tested by:            ae
  MFC after:            1 week
  Sponsored by:         Mellanox Technologies

Changes:
  head/sys/netinet6/in6_ifattach.c
  head/sys/netinet6/in6_mcast.c
  head/sys/netinet6/in6_var.h

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to