[Bug 259458] iflib_rxeof NULL pointer crash with vmxnet3 driver

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 26 Oct 2021 15:36:53 UTC

--- Comment #9 from Andriy Gapon <avg@FreeBSD.org> ---
It seems that I got a little bit confused again with respect to ifl_rx_bitmap
and ifl_sds.ifsd_m.  iflib_rxd_pkt_get() calls rxd_frag_to_sd() before the
memcpy that crashed and the latter clears the current bit in ifl_rx_bitmap. 
Also, *sd.ifsd_m was assigned NULL in iflib_rxd_pkt_get().  And originally I
established that 'm' was not NULL, so originally ifsd_m was not NULL.

So, it looks that index 327 was actually filled when the call started.
The problem was only with ifsd_cl.  Somehow it was not refilled and was NULL.

You are receiving this mail because:
You are the assignee for the bug.