[Bug 283426] panic in sbappendaddr_locked() - if_ovpn related?

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 01 Apr 2025 12:28:20 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283426

--- Comment #16 from Kristof Provost <kp@freebsd.org> ---
Thanks for that test case, it was extremely helpful.

I see what's happening here now. The if_ovpn filter function calls m_unshare(),
which allocates a new mbuf, but then decides it doesn't want the packet after
all.
That's normally fine, but we can't tell the caller that we've messed with the m
pointer, so the caller continues with a now invalid mbuf pointer.

I hope to propose a fix later today.

-- 
You are receiving this mail because:
You are the assignee for the bug.