[Bug 262663] panic in ipv6 jail ipv6 prison_ip_check() in6_pcblookup_hash_locked() - corrupt stack?

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 21 Mar 2022 07:43:33 UTC

--- Comment #2 from Dave Cottlehuber <dch@freebsd.org> ---
trying revert of:

commit eb8dcdeac22daadbf07be81d7338e14ec4cc7d7f
Author: Gleb Smirnoff <glebius@FreeBSD.org>
Date:   Sun Dec 26 10:45:50 2021 -0800

    jail: network epoch protection for IP address lists

    Now struct prison has two pointers (IPv4 and IPv6) of struct
    prison_ip type.  Each points into epoch context, address count
    and variable size array of addresses.  These structures are
    freed with network epoch deferred free and are not edited in
    place, instead a new structure is allocated and set.

    While here, the change also generalizes a lot (but not enough)
    of IPv4 and IPv6 processing. E.g. address family agnostic helpers
    for kern_jail_set() are provided, that reduce v4-v6 copy-paste.

    The fast-path prison_check_ip[46]_locked() is also generalized
    into prison_ip_check() that can be executed with network epoch
    protection only.

    Reviewed by:            jamie
    Differential revision:  https://reviews.freebsd.org/D33339

You are receiving this mail because:
You are the assignee for the bug.