[Bug 253587] iflib (?): reproducible mbuf-related crashes

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Kevin Bowling <***@freebsd.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|In Progress |Closed
Resolution|--- |FIXED
CC| |***@freebsd.org

--- Comment #9 from Kevin Bowling <***@freebsd.org> ---
(In reply to Kamigishi Rei from comment #8)
Thank you for the report and confirmation of the fix. Have the later 13.0
distributions remained stable?

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Kevin Bowling <***@freebsd.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|Closed |In Progress
Resolution|FIXED |---

--- Comment #10 from Kevin Bowling <***@freebsd.org> ---
Did not mean to close this yet, reopening for confirmation from reporter.

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

--- Comment #11 from Kamigishi Rei <***@haruhiism.net> ---
(In reply to Kevin Bowling from comment #9)
Have not had a single panic since, thank you.

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Kamigishi Rei <***@haruhiism.net> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|In Progress |Closed
Resolution|--- |FIXED

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Kevin Bowling <***@freebsd.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Summary|iflib (?): reproducible |nd6: m_nextpkt pointer not
|mbuf-related crashes |NULL'ed before sending

--- Comment #12 from Kevin Bowling <***@freebsd.org> ---
(In reply to Kamigishi Rei from comment #11)

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Kubilay Kocak <***@FreeBSD.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
See Also| |https://reviews.freebsd.org
| |/D28377
Flags| |maintainer-feedback?(kbowli
| |***@freebsd.org),
| |maintainer-feedback?(***@Fr
| |eeBSD.org),
| |maintainer-feedback?(melifa
| |***@FreeBSD.org)
CC| |***@FreeBSD.org

--- Comment #13 from Kubilay Kocak <***@FreeBSD.org> ---
^Triage:

Do we have specific commit(s) [1] that resolved this issue? If not, please
change resolution to OBE (FIXED is for 'resolve by way of change, usually a
commit). If so please assign to committer that resolved and set mfc-* flags to
branches that it was merged to. Thanks!

[1] Potentially src b3cfe07d

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

--- Comment #14 from commit-***@FreeBSD.org ---
A commit in branch stable/12 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=be1fb99a727b784781f7d8d95bb6f14707e2d886

commit be1fb99a727b784781f7d8d95bb6f14707e2d886
Author: Randall Stewart <***@FreeBSD.org>
AuthorDate: 2021-01-27 18:32:52 +0000
Commit: Alexander V. Chernikov <***@FreeBSD.org>
CommitDate: 2021-04-18 14:54:14 +0000

When we are about to send down to the driver layer
we need to make sure that the m_nextpkt field is NULL
else the lower layers may do unwanted things.

Reviewed By: gallatin, melifaro
Differential Revision: https://reviews.freebsd.org/D28377
PR: 253587

(cherry picked from commit 24a8f6d369962f189ad808f538029179b1e7dc2f)

sys/netinet6/nd6.c | 1 +
1 file changed, 1 insertion(+)

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

--- Comment #15 from commit-***@FreeBSD.org ---
A commit in branch stable/11 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=f974af4e59ee533906437b22a5b8b41219bde005

commit f974af4e59ee533906437b22a5b8b41219bde005
Author: Randall Stewart <***@FreeBSD.org>
AuthorDate: 2021-01-27 18:32:52 +0000
Commit: Alexander V. Chernikov <***@FreeBSD.org>
CommitDate: 2021-04-18 14:57:22 +0000

When we are about to send down to the driver layer
we need to make sure that the m_nextpkt field is NULL
else the lower layers may do unwanted things.

Reviewed By: gallatin, melifaro
Differential Revision: https://reviews.freebsd.org/D28377
PR: 253587

(cherry picked from commit 24a8f6d369962f189ad808f538029179b1e7dc2f)

sys/netinet6/nd6.c | 1 +
1 file changed, 1 insertion(+)

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253587

Alexander V. Chernikov <***@FreeBSD.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Flags| |mfc-stable13+,
| |mfc-stable12+,
| |mfc-stable11+