Date: Mon, 21 Mar 2022 07:43:33 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=262663 --- Comment #2 from Dave Cottlehuber <firstname.lastname@example.org> --- trying revert of: commit eb8dcdeac22daadbf07be81d7338e14ec4cc7d7f Author: Gleb Smirnoff <glebius@FreeBSD.org> Date: Sun Dec 26 10:45:50 2021 -0800 jail: network epoch protection for IP address lists Now struct prison has two pointers (IPv4 and IPv6) of struct prison_ip type. Each points into epoch context, address count and variable size array of addresses. These structures are freed with network epoch deferred free and are not edited in place, instead a new structure is allocated and set. While here, the change also generalizes a lot (but not enough) of IPv4 and IPv6 processing. E.g. address family agnostic helpers for kern_jail_set() are provided, that reduce v4-v6 copy-paste. The fast-path prison_check_ip_locked() is also generalized into prison_ip_check() that can be executed with network epoch protection only. Reviewed by: jamie Differential revision: https://reviews.freebsd.org/D33339 -- You are receiving this mail because: You are the assignee for the bug.