From: "Beschorner Daniel" <[EMAIL PROTECTED]> Date: Tue, 17 Jul 2007 21:03:20 +0200
> > >>> I managed to reproduce a crash with ipcomp, will try to > > fix it later. > > >>> > > >> Yes, I can confirm this. > > >> After disabling IPComp the crashes went away. > > >> > > > The crash happens in xfrm_bundle_ok when walking the bundle upwards > > > following xfrm_dst->u.next. The loop should be stopped when > > > xfrm_dst->u.next == first (the topmost xfrm_dst), but it points to > > > NULL instead. I'm pretty sure the attached patch is responsible, > > > it breaks XFRM's assumption that dst->next and xfrm_dst->u.next are > > > the same pointer and xfrm_dst now shares the next pointer with > > > rcu_head.next in struct dst_entry. > > > > > > Eric, could you look into this please? > > > > I fixed it myself. Daniel, can you please test this patch? > > Many thanks Patrick!!! > I tested it and found it working! Thank you for testing. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
