Re: FreeBSD 5 ip_gre and netisr_enable=1

2005-08-26 Thread Robert Watson
On Thu, 25 Aug 2005, ming fu wrote: when a GRE packet gets into the ip_gre2(), its gre header is stripped and sent to netisr_dispatch() for ip_input() processing again. In case, the net.isr.enable is 1, the packet will be delivered to ip_input directly instead of put in the queue. Probably,

Re: FreeBSD 5 ip_gre and netisr_enable=1

2005-08-25 Thread Andre Oppermann
Max Laier wrote: > > On Thursday 25 August 2005 22:10, ming fu wrote: > > Hi, > > > > This problem exit in some old gre.c (not a part of official freebsd) to > > handle wccp packets. A carefully crafted packet can cause it to deplete > > kernel stack and casuing a panic. It can crash a 4.2 kernel

Re: FreeBSD 5 ip_gre and netisr_enable=1

2005-08-25 Thread Max Laier
On Thursday 25 August 2005 22:10, ming fu wrote: > Hi, > > This problem exit in some old gre.c (not a part of official freebsd) to > handle wccp packets. A carefully crafted packet can cause it to deplete > kernel stack and casuing a panic. It can crash a 4.2 kernel with about > 200-300 repeated ip

FreeBSD 5 ip_gre and netisr_enable=1

2005-08-25 Thread ming fu
Hi, This problem exit in some old gre.c (not a part of official freebsd) to handle wccp packets. A carefully crafted packet can cause it to deplete kernel stack and casuing a panic. It can crash a 4.2 kernel with about 200-300 repeated ip+gre header. I believe the problem appears on FreeBSD