cvs commit: src/sys/contrib/pf/net pf.c pfvar.h

Max Laier mlaier at
Sat Aug 6 01:52:36 GMT 2005

mlaier      2005-08-06 01:52:35 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_6)
    sys/contrib/pf/net   pf.c pfvar.h 
  MFC: pf.c, 1.35 pfvar.h, 1.12
    Prevent a race condition.  As pf_send_tcp() - called for expired synproxy
    states - has to drop the lock when calling back to ip_output(), the state
    purge timeout might run and gc the state. This results in a rb-tree
    inconsistency.  With this change we flag expiring states while holding the
    lock and back off if the flag is already set.
    Reported by:  glebius
  Approved by:    re (kensmith)
  Revision  Changes    Path  +5 -0      src/sys/contrib/pf/net/pf.c  +3 -0      src/sys/contrib/pf/net/pfvar.h

More information about the cvs-src mailing list